What the Vulnerabilities Are

On Wednesday, October 21, 2026 , the U.S. National Security Agency (NSA) released an urgent advisory warning that two critical flaws have been identified in the PHP runtime. The bugs have existed since PHP 5 , the version first released in 2004 , and affect the core file‑system and database handling routines that power roughly 70 % of the web —more than 33 million active sites.

Both flaws were uncovered by AI‑driven research teams:

🔹 ------------

• AI Tool Used: --------------

• Initiative: ------------

🔹 OpenAI

• AI Tool Used: GPT‑5.6 Sol

• Initiative: “Patch the Planet”

🔹 Google’s Wiz

• AI Tool Used: Wiz Atlas security AI agent (paired with Gemini 4 Argon)

• Initiative: Internal security research

The researchers followed responsible disclosure, collaborating with the PHP Foundation to ship patches before any public exploit was released.…