{"schema":"postcutoff/event@1","as_of":"2026-10-22T13:31:00+02:00","url":"https://postcutoff.com/e/2026-10-21-php2shell-ai-found-php-rce/","md":"https://postcutoff.com/e/2026-10-21-php2shell-ai-found-php-rce/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-21-php2shell-ai-found-php-rce","date":"2026-10-21","date_precision":"day","short_title":"PHP2Shell: critical remote-code-execution flaws in PHP, found with GPT-5.6 Sol and Gemini 4 Argon, force emergency patching and take websites offline worldwide","deck":null,"takeaway":"The bugs were found with frontier AI: by Calif with GPT-5.6 Sol under OpenAI's Patch the Planet programme, and by Google's Wiz with Gemini 4 Argon, GPT-5.6 Sol and its Wiz Atlas agent.","category":"policy-safety","category_label":"Policy & safety","importance":5,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"Wiz Research: PHP2Shell — AI uncovers critical RCE vulnerabilities affecting 70% of the Internet","url":"https://www.wiz.io/blog/php2shell-php-rce","type":"official","group":"primary","domain":"wiz.io"},{"n":2,"title":"OpenAI: Patch the Planet — global response coordination as agents uncover critical vulnerabilities","url":"https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities","type":"official","group":"primary","domain":"openai.com"},{"n":3,"title":"OpenAI on X (5.3M views)","url":"https://x.com/OpenAI/status/2112907856018309586","type":"official","group":"primary","domain":"x.com"},{"n":4,"title":"GitHub: openai/php2shell-checker (Codex skill)","url":"https://github.com/openai/php2shell-checker","type":"code","group":"primary","domain":"github.com"},{"n":5,"title":"The Record: Hundreds of websites taken offline as concern grows over two PHP vulnerabilities","url":"https://therecord.media/php-script-vulnerabilities-warnings","type":"press","group":"press","domain":"therecord.media"},{"n":6,"title":"TechCrunch: PHP Armageddon — OpenAI, Google's Wiz find ancient holes, panicking the internet","url":"https://techcrunch.com/2026/10/21/php-armageddon-openai-googles-wiz-find-ancient-holes-panicking-the-internet/","type":"press","group":"press","domain":"techcrunch.com"},{"n":7,"title":"Hacker News discussion (441 points)","url":"https://news.ycombinator.com/item?id=50180836","type":"discussion","group":"reactions","domain":"news.ycombinator.com"}],"official":4,"filed":"2026-10-22","updated":"2026-10-22","orgs":["OpenAI","Wiz","Google","PHP"],"title":"PHP2Shell: critical remote-code-execution flaws in PHP, found with GPT-5.6 Sol and Gemini 4 Argon, force emergency patching and take websites offline worldwide","summary":"On Oct 21, 2026 PHP shipped fixes for \"PHP2Shell\", memory-safety bugs in the PHP engine (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) that allow unauthenticated remote code execution on sites built with PHP, which runs about 70% of websites. The bugs were found with frontier AI: by Calif with GPT-5.6 Sol under OpenAI's Patch the Planet programme, and by Google's Wiz with Gemini 4 Argon, GPT-5.6 Sol and its Wiz Atlas agent. Governments issued warnings, some took sites offline before the patch, and Cloudflare and watchTowr reported exploitation attempts within hours. OpenAI called it \"one of the most impactful vulnerabilities in recent memory\".","key_facts":["CVEs: CVE-2026-109618 and CVE-2026-109619, severity 9.2/10, rated critical by PHP (The Record); Wiz describes four bugs under the two CVEs: an upload-progress unserializer use-after-free, remote process-memory disclosure, a fatal-error backtrace use-after-free and OPcache type confusion","Scope (Wiz): 'Every PHP version released in the last decade is affected by at least one of these vulnerabilities, going back to version 5.4'; TechCrunch says the flaws go back to PHP 5 (2004). PHP 8.1 and older get no fixes; upgrade target 8.5.12 (TechCrunch)","Impact: unauthenticated RCE demonstrated against WordPress, Drupal and Joomla; memory disclosure can leak passwords, tokens and API keys; 'Exploitation does not depend on a flaw in the application's code' (Wiz)","Wiz timeline: first bug found Aug 19, 2026; RCE on Drupal Aug 20 and WordPress Aug 21; reported to PHP Aug 24; PHP acknowledged Sept 21; patched releases and disclosure Oct 21","Who found it: Wiz Research (Sagi Tzadik, Shir Tamari, Nir Ohfeld, Tomer Schwartz) with Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol; Gemini 4 Argon 'made an invaluable contribution to finding the vulnerability, exploit development, attack detection, and validation of the patch'. Separately, security firm Calif found a flaw with GPT-5.6 Sol under OpenAI's Patch the Planet (TechCrunch, The Record)","Wiz: 'a single researcher completed in a week what previously would have taken a world-class team months of work'","OpenAI (X, 5.3M views): 'we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact'; it led a two-month coalition of maintainers and security providers because 'the fix was quite intricate and required a major change to the PHP engine'","OpenAI released a Codex skill to check whether a site is affected (github.com/openai/php2shell-checker, 1.2M-view post)","Fallout (The Record): PHP pre-announced the bugs on the evening of Oct 20 and patches landed after 10 a.m. ET Oct 21; the EU, US, Germany, Japan, Australia, the UK and the Netherlands issued warnings; several governments and companies such as Nintendo took sites offline; hundreds of sites were down on Oct 21","NSA advised that sites that cannot be patched immediately be taken offline (TechCrunch)","Exploitation: Cloudflare CTO Dane Knecht said attacks were already emerging; watchTowr saw in-the-wild attempts 'with a variety of proof-of-concept tools vibecoded with the help of AI', none successful yet (The Record). OpenAI and Wiz said they knew of no exploitation before disclosure","Interim mitigations from Cloudflare, Fastly, Google, Vercel, Akamai, AWS and others; Wiz: 'Applying the PHP security update remains the only complete remediation'"],"key_numbers":[],"tags":["cybersecurity","vulnerability","php","gpt-5-6-sol","gemini-4-argon","patch-the-planet","defenders-window","coordinated-disclosure"],"science":null,"body_md":"## What happened\n\nPHP's security team warned on the evening of Oct 20 of two critical bugs and released fixed versions on Oct 21. The same day Wiz\n(owned by Google) published its research and OpenAI said its models had helped find the flaws through Patch the Planet, its\nprogramme that gives vetted defenders frontier models for vulnerability work. Both groups disclosed responsibly and spent about two\nmonths with PHP and infrastructure providers on a fix that, OpenAI said, \"required a major change to the PHP engine\".\n\nOnce the bugs were public, a patching race began. Governments in Europe, the US, Japan and Australia issued alerts, the NSA told\noperators who could not patch to take sites offline, and some government sites and companies (Nintendo among them) went dark. Within\nhours Cloudflare and watchTowr reported attack attempts, some using proof-of-concept code written with AI help.\n\nOpenAI's announcement does not name every finder in the post we could read (the OpenAI page returned HTTP 403 to our fetcher); the\nattribution of one flaw to Calif with GPT-5.6 Sol comes from TechCrunch and The Record.\n\n## Why it matters\n\nIt is the first AI-found vulnerability with internet-scale reach to trigger a global emergency response, and OpenAI presents it as\nproof of its \"Defender's Window\" argument: frontier models found the bug before attackers did. Wiz's note that AI removes the old\nbarrier to exploitation (\"With AI this is no longer a barrier\") shows the other side: the same models shorten the time from disclosure\nto working exploit, so millions of unpatched or unpatchable PHP servers are now exposed.","disputed":[],"related":[{"id":"2026-10-21-microsoft-storm-0940-artex-connectwise","url":"https://postcutoff.com/e/2026-10-21-microsoft-storm-0940-artex-connectwise/","date":"2026-10-21","date_precision":"day","short_title":"Microsoft: China-aligned Storm-0940 used the ARTEX agentic AI hacking framework to compromise ConnectWise and hit 2,250+ Microsoft 365 tenants","deck":null,"takeaway":"Microsoft attributes the ConnectWise cloud-backup supply-chain compromise to the group; ARTEX agents then tried to sign in to more than 2,250 tenants at 2,900 attempts per minute.","category":"policy-safety","category_label":"Policy & safety","importance":4,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":1,"official":1,"filed":"2026-10-22","updated":"2026-10-22","orgs":["Microsoft","ConnectWise"]},{"id":"2026-10-15-cloudflare-openai-discovery-pilot-results","url":"https://postcutoff.com/e/2026-10-15-cloudflare-openai-discovery-pilot-results/","date":"2026-10-15","date_precision":"day","short_title":"Cloudflare–OpenAI discovery pilot results","deck":null,"takeaway":"Cloudflare spent the previous year building tools to block or charge AI crawlers.","category":"business","category_label":"Business","importance":2,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":3,"official":2,"filed":"2026-10-16","updated":"2026-10-16","orgs":["Cloudflare","OpenAI"]},{"id":"2026-10-13-xbow-chrome-full-chain-gpt-5-6-sol-250k","url":"https://postcutoff.com/e/2026-10-13-xbow-chrome-full-chain-gpt-5-6-sol-250k/","date":"2026-10-13","date_precision":"day","short_title":"XBOW's GPT-5.6 Sol agents build a $250k Chrome full-chain exploit in six days","deck":null,"takeaway":"Google paid its first $250,000 full-chain reward under the 2026 VRP rules; all three bugs are fixed.","category":"agents","category_label":"Agents","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":5,"official":2,"filed":"2026-10-14","updated":"2026-10-14","orgs":["XBOW","OpenAI","Google"]},{"id":"2026-09-30-gemini-4-argon","url":"https://postcutoff.com/e/2026-09-30-gemini-4-argon/","date":"2026-09-30","date_precision":"day","short_title":"Google announces Gemini 4 Argon, its new frontier model, first released only to cyber defenders via the Fairwind Program","deck":null,"takeaway":"On Sept 30, 2026 Google DeepMind announced Gemini 4 Argon, its first new flagship since Gemini 3.1 Pro.","category":"model-release","category_label":"Model releases","importance":5,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":39,"official":13,"filed":"2026-09-30","updated":"2026-10-13","orgs":["Google DeepMind","Google"]},{"id":"2026-08-16-brockman-defenders-window","url":"https://postcutoff.com/e/2026-08-16-brockman-defenders-window/","date":"2026-08-16","date_precision":"day","short_title":"Greg Brockman publishes \"The Defender's Window\"","deck":"A narrow window to automate cyber defense after the Hugging Face incident","takeaway":"It is OpenAI leadership's first long public reckoning with the Hugging Face incident, including the admission that the lab underestimated its own models' cyber capabilities.","category":"policy-safety","category_label":"Policy & safety","importance":4,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":4,"official":3,"filed":"2026-09-29","updated":"2026-09-29","orgs":["OpenAI"]},{"id":"2026-07-09-gpt-5-6-sol-terra-luna","url":"https://postcutoff.com/e/2026-07-09-gpt-5-6-sol-terra-luna/","date":"2026-07-09","date_precision":"day","short_title":"OpenAI broadly releases GPT-5.6 after government-gated preview","deck":null,"takeaway":"First frontier model whose public release was explicitly gated by US government review, and the model family involved in the July 2026 sandbox-escape incident.","category":"model-release","category_label":"Model releases","importance":4,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":7,"official":3,"filed":"2026-09-29","updated":"2026-09-29","orgs":["OpenAI"]},{"id":"2026-05-12-openai-daybreak-cybersecurity","url":"https://postcutoff.com/e/2026-05-12-openai-daybreak-cybersecurity/","date":"2026-05-12","date_precision":"day","short_title":"OpenAI launches Daybreak cyber-defense initiative with GPT-5.5-Cyber and Codex Security","deck":null,"takeaway":"Establishes OpenAI's \"defenders first\" release pattern for cyber-capable models, later used for GPT-6 Astra; it is also the civilian counterpart to the government-gated GPT-5.6 rollout.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":12,"official":5,"filed":"2026-09-29","updated":"2026-10-10","orgs":["OpenAI"]}],"people":[],"posts":[{"id":"2026-10-21-openai-php2shell-patch-the-planet","title":"OpenAI: models helped find critical PHP flaws, 'one of the most impactful vulnerabilities in recent memory'","url":"https://postcutoff.com/p/2026-10-21-openai-php2shell-patch-the-planet/"}],"videos":[],"models":[],"changes":[{"date":"2026-10-22","type":"filed","text":"Created (HN, lab X, Google News)"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-22","run":null,"sources_read":null,"updated":"2026-10-22","human_review":null,"version":null},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":174,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":113,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":204,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":143,"in_training_data":false}],"short_url":"https://postcutoff.com/s/php2shell-critical"}