Market & Regulation
Critical PHP Vulnerabilities Trigger Global Patching
WIRED AIhigh confidence
Why it matters
- →PHP remains foundational to much of the web, making this a high-impact infrastructure risk.
- →Active exploitation has already been detected, requiring immediate patching rather than preparation.
- →The use of AI in vulnerability discovery signals faster future attack cycles for critical flaws.
The PHP Foundation released emergency updates for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting all PHP installations serving web requests since version 5. The flaws allow unauthenticated remote code execution through file upload interfaces, with a CVSS score of 9.2. Security firms like Cloudflare reported early signs of exploitation before the official patch release, prompting warnings from global cyber agencies including the UK's NCSC and the FBI. Organizations are urged to update immediately or take systems offline, as AI-assisted discovery tools may accelerate automated attacks.
Read originalThe story around this
TopicAI Uncovers Critical PHP Vulnerabilities
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
What happened next
- 1AI uncovers critical PHP vulnerabilities
TechCrunch AI · October 21, 2026 · Related
More from WIRED AI
More in Market & Regulation
© TechCrunch AIMarket & Regulationother
Judge allows NAACP lawsuit over xAI pollution to proceed
xAI's attempt to dismiss the NAACP's Clean Air Act lawsuit failed after a federal judge ruled that its gas turbines are not exempt mobile sources and that plaintiffs have standing. This legal setback confirms that AI infrastructure operators cannot bypass environmental permitting by classifying heavy industrial equipment as temporary or mobile. The ruling forces xAI to face scrutiny over air quality impacts at its Colossus data center, setting a precedent for how large-scale compute facilities are regulated under existing environmental laws.
TechCrunch AI
© TechCrunch AI
