AI Unveils PHP Vulnerabilities Hidden for Over Ten Years; NSA Urges Immediate System Shutdown if Repairs Are Delayed
2 day ago / Read about 0 minute
Author:小编   

On October 22 (Beijing Time), OpenAI and Wiz, a cybersecurity firm under Google, revealed that researchers had employed AI technology to detect two severe security vulnerabilities in PHP. These vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, both received a high-severity rating of 9.2 on the CVSS v4.0 scale. The U.S. National Security Agency (NSA) promptly advised affected organizations to update their systems without delay. If immediate updates were not possible, the NSA recommended temporarily taking systems offline until the risks could be effectively mitigated. In response, PHP officials have issued patched versions, including PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, to address these vulnerabilities.