Hadrian
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 1
- AI-found PHP2Shell flaws under mass exploitation as PHP ships emergency patches
PHP released versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12 on October 21 to fix two memory flaws collectively called PHP2Shell, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 under CVSS v4.0. The PHP Foundation said security firm Calif used OpenAI's GPT-5.6 Sol on August 11 to confirm the bugs could yield unauthenticated remote code execution, while Wiz independently found the first flaw using Gemini 4 Argon and GPT-5.6 Sol. Hadrian reported mass exploitation attempts, mainly through PHP's session upload-progress mechanism, about two and a half hours before the patches appeared, and Amazon said attackers tried to exploit the flaws four days before public disclosure.
iThome 台湾 · 🔥 0
Experience and discussion from the community
Share my Hadrian experienceAsk about Hadrian
Nobody has shared their experience with Hadrian yet.