TiDB Cloud

Headlines · 1

1. Oct 22
   Leiphone: AI-assisted PHP2Shell discovery amid a wider security storm

   Leiphone AI published a deep-dive report saying the PHP security team shipped fixes on 21 October 2026 at 14:00 UTC for two unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2 and nicknamed PHP2Shell, affecting PHP versions from 5.4 onward. The report says Calif Research researcher Ryan Austin found the flaws with large-language-model assistance under OpenAI's "Patch the Planet" program, that Wiz and OpenAI teams independently found the same issues, and it groups the disclosure with a CVSS 10.0 GitLab RCE (CVE-2026-110264), Node.js and nginx patches, an eMudhra certificate-chain weak-entropy issue, and a claimed 10.6 TB TiDB Cloud breach. These details come from a single Leiphone report rather than vendor advisories reviewed directly.

   雷峰网 AI · 🔥 0

Experience and discussion from the community

Share my TiDB Cloud experienceAsk about TiDB Cloud