IT之家 · ITHome
OpenAI helps coordinate fixes for two severe PHP vulnerabilities
OpenAI says its Patch the Planet initiative helped researchers identify two severe PHP vulnerabilities and supported roughly two months of coordination before public disclosure. PHP maintainers led validation, patch development and releases, with support from security firms, cloud providers and cybersecurity agencies across multiple countries. Security updates have been released.
What to know
- 01
The two vulnerabilities, collectively called PHP2Shell, each have a CVSS v4.0 score of 9.2 and could allow unauthenticated remote code execution.
- 02
Calif used OpenAI’s GPT-5.6 Sol model to identify one key flaw; Wiz also independently discovered and reported related vulnerabilities.
Why it matters
Given industry estimates that about 70% of websites rely on PHP, these updates have broad relevance for website security maintenance.
AI-assisted brief. Read the source for full details. Editorial & sourcing policy
