ResearchLatent Space

[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months

#php#vulnerabilities#security#openai#collaboration

English

OpenAI's Patch the Planet program, in collaboration with researcher Ryan Austin from Calif, discovered PHP2Shell vulnerabilities in core PHP that affect 70% of the web. These vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, allow for remote code execution and memory disclosure, prompting a coordinated response among developers and security providers over two months.

中文

OpenAI的Patch the Planet项目与Calif的研究员Ryan Austin合作，发现了影响70%网络的核心PHP中的PHP2Shell漏洞。这些漏洞被标识为CVE-2026-109618和CVE-2026-109619，允许远程代码执行和内存泄露，导致开发者和安全提供者在两个月内进行协调响应。