Decade-old PHP bug puts websites at risk: How AI uncovered it, who is vulnerable and how to stay safe | Explained

PHP2Shell exposes two critical core engine flaws that allow remote code execution. Wiz Research used AI models to uncover CVE-2026-109618 and CVE-2026-109619, enabling attackers to run code and exfiltrate data without authentication. Amazon detected attacks before disclosure. Developers should patch PHP 8.2+ and monitor for exploitation.

Opening Kapyn…