Technologijų ir saugumo sistemų specialistasOct 22, 2026

— followers— AI cites

Mostly AI-generated

AI found two holes in PHP itself this week. Not in some plugin, in PHP.

PHP2Shell, CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2. Researchers from Calif, Wiz and OpenAI found them, patches came out yesterday. One request without login, before your app code even runs. PHP-FPM, mod_php, FrankenPHP, LiteSpeed, all of them.

If you have a WordPress site somewhere, ask your hosting today what PHP they run. You want 8.5.12, 8.4.27, 8.3.36 or 8.2.35. 8.1 and older get no updates anymore.

CERT-EU put the versions and temporary settings on one page https://cert.europa.eu/publications/security-advisories/2026-018/

Same models that write half our code now find bugs in the language. Not sure if I should feel calmer or not.

cert.europa.eu

- views

AI found two holes in PHP itself this week.

That Google login window is not a window

AI Sounds Sure. That Doesn't Mean You Are

Speed is not the same as voice

First profit. Look where it came from.

That Google login window is not a window

AI Sounds Sure. That Doesn't Mean You Are

Speed is not the same as voice

First profit. Look where it came from.