A pair of critical PHP security flaws discovered by researchers with the help of AI forced an emergency patch and set off scattered attacks across the web. PHP is a programming language used to build up to 70 percent of the websites online today.
\n\nMashable reports that the PHP team pushed out emergency fixes on Wednesday for two critical vulnerabilities, moving up the release to 10:00 a.m. ET after someone leaked flaw details a day ahead of schedule. The fixes had originally been planned for a coordinated release later in the week, giving companies time to prepare, according to the facts of the case. Once the leak happened, that plan fell apart. The flaws were reportedly found by researchers using AI to probe the popular web technology.
\n\nPHP is the server-side programming language running countless content management systems, online stores, custom web services and other products. That’s why a flaw in it tends to spread fast. The two bugs, tracked as CVE-2026-109618 and CVE-2026-109619, could let an attacker remotely take over a server without ever logging in. The attack overloads PHP’s memory to corrupt it, then exploits that corruption to seize control under certain conditions. One of the flaws specifically…
Original source: https://www.breitbart.com/economy/
