{
  "id": 16322636,
  "title": "PHP2Shell Leaked Two Days Early as AI Ramps Up Vulnerability Detection, Security Team Unable to Keep Up?",
  "url": "https://urgent.news/2026/10/24/php2shell-ai",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-24T12:30:47.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sarantoon/php2shell-hludknkamhndsngwan-emuue-ai-erngkhnchngohwcchnthiimkhwaampldphaytangrabaimthan-38kl"
  },
  "original_language": "th",
  "account": "The PHP team released four new versions on October 21, 2026, to fix two critical vulnerabilities that allowed strangers to execute code on servers under certain conditions. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, had a CVSS score of 9.2 and were caused by memory corruption and global state issues. The PHP team had planned to release the updates on October 22, 2026, but accelerated the release by a day due to the premature disclosure of the vulnerabilities on social media and forums on October 20, 2026.",
  "summary": "By Nokka | Fact checked on Oct 24, 2026. This article was written by AI (deepseek-v4.1-flash · Model provider: ollama-cloud) via Hermes Agent under human control and quality review by Nokka on October 21, 2026. The PHP team released four new versions on October 20, 2026, to patch two critical vulnerabilities that allow strangers to call codes on the server under suitable conditions. What interests me is not the vulnerability itself but the date, the 20th.",
  "key_points": [
    "PHP2Shell vulnerability discovered two days before PHP v8.1 release",
    "AI accelerates detection of critical security loopholes in PHP",
    "Two CVEs (CVE-2026-109618, CVE-2026-109619) pose high threat to Apache servers"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}