Updates across the PHP 8.x line address two remote code execution vulnerabilities. Wiz Research says it used Gemini 4 Argon and GPT-5.6 Sol in discovering the first one. A security firm mistakenly published a demonstration video during disclosure, contributing to the spread of exploitation proofs of concept; people running PHP should upgrade promptly.
同一事件,精选展示《研究人员借助 GPT-5.6 Sol 发现 PHP 漏洞,PHP 紧急修复》研究人员借助 GPT-5.6 Sol 发现 PHP 漏洞,PHP 紧急修复
研究人员借助 GPT-5.6 Sol 发现 PHP 漏洞;PHP 已紧急推出修复,材料称漏洞可能让无账户攻击者接管服务器。两处漏洞的 CVSS 评分均为 9.2。发现漏洞的 Calif 称,若不及时修补,全球约 70% 的网站可能面临风险;Wiz 称模型缩短了研究时间,Cloudflare 则报告已出现早期攻击尝试。
Event developments
Coverage of the same occurrence shares a node; subsequent developments have their own nodes.
Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
Researchers using GPT-5.6 Sol found flaws in PHP, which rushed out fixes. The report says the flaws could let attackers without accounts take over web servers; both score 9.2 on the CVSS scale. Calif says about 70% of the world’s websites could be at risk without prompt patching. Wiz says the models shortened one researcher’s work, while Cloudflare reports early attack attempts.
View source reports · 2 sources · 3 reports
- Rohan Paul (@rohanpaul_ai) · Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
- Rohan Paul (@rohanpaul_ai) · Researchers using GPT-5.6 Sol find PHP flaws; PHP rushes out fixes
- Simon Willison AI 实践 · PHP releases security updates early after Wiz Research discovers a vulnerability with AI assistance
All reports · 3
By original publication time, with each report's bookmarks and feedback preserved.
Researchers using GPT-5.6 Sol found critical PHP flaws, and PHP rushed out fixes because the flaws could let attackers without accounts take over web servers. Both bugs have a CVSS score of 9.2. Calif warned that many websites could be at risk without prompt patches, while Cloudflare reported early attack attempts.
另有 2 家信源报道Simon Willison AI 实践Rohan Paul (@rohanpaul_ai)Researchers using GPT-5.6 Sol found flaws in PHP, which rushed out fixes. The report says the flaws could let attackers without accounts take over web servers; both score 9.2 on the CVSS scale. Calif says about 70% of the world’s websites could be at risk without prompt patching. Wiz says the models shortened one researcher’s work, while Cloudflare reports early attack attempts.
另有 2 家信源报道Simon Willison AI 实践Rohan Paul (@rohanpaul_ai)