OpenAI coordinates global fix for two critical PHP flaws
Briefing by News4U · First published
OpenAI says its AI found two PHP remote-code flaws patched before disclosure.
ITHome reports that OpenAI’s Patch the Planet program coordinated the discovery and pre-disclosure fix of two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each rated 9.2 on CVSS v4.0. [1]
The flaws affect roughly 70 % of websites and could allow unauthenticated remote code execution. PHP released emergency updates on 21 October for versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35. [1]
OpenAI also announced a $1 billion fund to subsidize AI security tools for resource-limited organizations and proposed a five-stage AI-era vulnerability response framework. [1]
Sources
- 影响约 70% 网站：PHP 高危漏洞被修复，OpenAI 牵头协调全球发现 / 修复
ITHome · · Summary only