Decade-old PHP bug puts websites at risk: How AI uncovered it, who is vulnerable and how to stay safe | Explained
PHP2Shell is a pair of critical flaws in PHP’s core engine, CVE-2026-109618 and CVE-2026-109619, that could let attackers run code remotely and steal data without logging in. Wiz Research found them using AI models; Amazon spotted attacks before disclosure. Here’s how they work and who is at risk.
Story file
- Section
- Science
- Topics
- AI & gadgets
- First reported by
- Mint
- Reporter
- pragya singha roy
- Published
- Thursday, 22 October 2026, 9:23 am IST
- Coverage
- One outlet so far
How this page works. The Headline Update lists this report from Mint with a short summary and a link to the original. The original reporting and photograph belong to the publisher. Spotted an error in our summary? Tell our corrections desk.
