NSA warns of critical PHP flaws; patches released after AI discovery

NSA warns of critical PHP flaws; patches released after AI discovery

सुरक्षा प्रौद्योगिकी
इस घटना को पिन करने के लिए साइन इन करें

The U. S. National Security Agency warned on October 21 that two severe PHP vulnerabilities dating back to 2004 had been discovered with the assistance of artificial-intelligence tools, and that emergency patches had already been released.

The PHP Foundation had earlier scheduled and then issued emergency updates for all supported PHP versions, including,, and, to fix the remote code execution flaws identified as CVE-2026-109618 and CVE-2026-109619. The patches were prepared after details of the flaws were leaked ahead of the planned public disclosure.

अभिनेताओं

PHP security team WatchTowr security researcher Benjamin Harris

स्थान

कोई रिकॉर्ड नहीं

तथ्य जांच

ये मेट्रिक्स कैसे काम करती हैं
फ़ैसला: आंशिक रूप से पुष्ट विश्वास स्तर: 56% दावे: 1
एक नज़र में

The claim that the PHP development team planned to release emergency security updates on October 21, 2026 to fix two high-severity remote code execution vulnerabilities was partially confirmed.

पूर्ण विवरण अनलॉक करने के लिए साइन इन करें या सदस्यता लें: दावे, स्रोत और सत्यापन।

रजिस्टर करें साइन इन करें

इस अनुभाग में बाहरी स्रोतों के विरुद्ध दावों का स्वचालित सत्यापन है और इसमें अशुद्धियाँ हो सकती हैं।

लेख

21 अक्टूबर 2026
6 कुल
PHP armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet
PHP armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet

TechCrunch • 21 अक्टू 17:59

The U.S. National Security Agency warned of two severe PHP flaws dating back to 2004, for which patches have been released, and highlighted the role of AI tools in uncovering them.

विश्वसनीयता 72% हेरफेर 24% मध्यस्थ
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

WIRED • 21 अक्टू 14:26

The PHP Foundation issued emergency updates for two critical flaws, CVE-2026-109618 and CVE-2026-109619, urging immediate patching to prevent widespread exploitation.

विश्वसनीयता 78% हेरफेर 9% मध्यस्थ
PHP2Shell: Critical PHP vulnerabilities patched, update now!
PHP2Shell: Critical PHP vulnerabilities patched, update now!

Help Net Security • 21 अक्टू 13:51

The PHP development team has released emergency updates for PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address two critical remote code execution vulnerabilities, urging users to upgrade immediately.

विश्वसनीयता 78% हेरफेर 8% मध्यस्थ
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

The Hacker News • 21 अक्टू 10:36

PHP will issue fixes for two high-severity flaws on October 21, and security researchers say disabling the session upload progress feature is not a sufficient mitigation.

विश्वसनीयता 72% हेरफेर 8% मध्यस्थ
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patch
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patch

Infosecurity Magazine • 21 अक्टू 10:20

Two high-severity PHP flaws were disclosed a day before the planned release, prompting the PHP project and European cyber authorities to urge immediate remediation.

विश्वसनीयता 72% हेरफेर 7% मध्यस्थ
PHP warns it plans to release 2 emergency patches imminently
PHP warns it plans to release 2 emergency patches imminently

Ars Technica • 21 अक्टू 02:12

The PHP development team announced emergency updates for two high-severity flaws, urging administrators to prepare for deployment within the next 12 hours.

विश्वसनीयता 71% हेरफेर 8% मध्यस्थ
20 अक्टूबर 2026
1 कुल
PHP warns admins of two critical flaws, emergency patches coming tomorrow
PHP warns admins of two critical flaws, emergency patches coming tomorrow

BleepingComputer • 20 अक्टू 20:56

The PHP development team will release emergency security updates on October 21 to fix two high-severity remote code execution vulnerabilities after details were leaked ahead of the planned disclosure.

विश्वसनीयता 78% हेरफेर 8% मध्यस्थ

संबंधित घटनाएँ