1. Wiz Oct 21, 2026
   

   Vulnerability

   Wiz Research discovered several critical vulnerabilities in the core of PHP, found with the help of cutting-edge AI models.

   • Every version of PHP released in ten years is affected by at least one flaw, up to version 5.4.

   • The flaws are grouped under two CVEs, with a severity reaching CVSS 9.2.

   • The php2shell script executed code without authentication on WordPress, Drupal and Joomla.

   • According to Wiz, the AI models made it possible to develop and adapt working exploits in a few hours.

   Read the original article PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet wiz.io

Back to the weekBack to the month