AI Discovers Long-Hidden Critical PHP Vulnerabilities, Official Patch Released
Understand the story
On October 22, 2026, TechCrunch reported that OpenAI and Wiz, a company owned by Google, used AI to discover two critical vulnerabilities hidden in PHP for over 20 years. The report cited an NSA warning that these two vulnerabilities have existed since PHP 5, released in 2004, and the PHP Foundation has issued patches for them. PHP powers approximately 70% of all websites—more than 33 million in total—giving the vulnerabilities a wide reach. The NSA advised websites unable to patch immediately to temporarily go offline to mitigate risk. The official patch is now available, and there are no further follow-up reports on the incident.
AI overview of reporting · Updated 1 h前
Reporting timeline
Explore different aspects of the story through its reporting.
- TechCrunch · AISelectedPHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
The NSA has warned about two critical vulnerabilities discovered in PHP, and the PHP Foundation has released patches. PHP powers roughly 70% of websites (over 33 million), and the flaws have existed since PHP 5 was released in 2004; sites that cannot patch immediately are advised to go temporarily offline.
Story heat trend
Not enough continuous observations to show a trend yet.