Calif Research
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 1
- Leiphone: AI-assisted PHP2Shell discovery amid a wider security storm
Leiphone AI published a deep-dive report saying the PHP security team shipped fixes on 21 October 2026 at 14:00 UTC for two unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2 and nicknamed PHP2Shell, affecting PHP versions from 5.4 onward. The report says Calif Research researcher Ryan Austin found the flaws with large-language-model assistance under OpenAI's "Patch the Planet" program, that Wiz and OpenAI teams independently found the same issues, and it groups the disclosure with a CVSS 10.0 GitLab RCE (CVE-2026-110264), Node.js and nginx patches, an eMudhra certificate-chain weak-entropy issue, and a claimed 10.6 TB TiDB Cloud breach. These details come from a single Leiphone report rather than vendor advisories reviewed directly.
雷峰网 AI · 🔥 0
Experience and discussion from the community
Share my Calif Research experienceAsk about Calif Research
Nobody has shared their experience with Calif Research yet.