Sinisterly
PHP2Shell - Critical AI-Discovered Vulnerabilities Run Wild Today - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: PHP2Shell - Critical AI-Discovered Vulnerabilities Run Wild Today (/Thread-PHP2Shell-Critical-AI-Discovered-Vulnerabilities-Run-Wild-Today)



PHP2Shell - Critical AI-Discovered Vulnerabilities Run Wild Today - Oni - 10-21-2026

Sites across the internet have been going offline today, following one of the biggest vulnerability discoveries this year. The vulnerabilities were discovered by OpenAI and are out-of-memory related. These vulnerabilities apply to current and previous versions of PHP, labeled both critical and remote.

Update PHP, secure your servers, and happy hunting!

Here's the actual CVEs:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

Here's a report from Malwarebytes:
https://www.malwarebytes.com/blog/bugs/2026/10/php2shell-why-websites-are-going-offline-for-emergency-security-updates