OpenAI发布Codex技能排查PHP2Shell漏洞
OpenAI发布了一款Codex技能，帮助网站运营方检查PHP环境是否可能受CVE-2026-109618和CVE-2026-109619影响；PHP基金会给这两项漏洞的CVSS v4.0评分均为9.2。PHP基金会已于10月21日发布修复版本，Amazon随后称漏洞正遭到广泛利用。OpenAI称模型协助研究人员发现了漏洞，但Calif研究员Ryan Austin否认模型是初始利用路径的最早发现者。
这起事件展示了AI辅助安全研究在互联网规模上的实际应用，但OpenAI的最早发现说法仍有争议，而且Amazon称漏洞已被广泛利用，运营方能否及时完成修补仍面临压力。
If you are wondering whether your website is affected, we have packaged a Codex skill to help check. Point your Codex at this repo to guide you through it: https://github.com/openai/php2shell-checker
OpenAI: OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers,
#OpenAI#PHP#PHP Foundation#Codex#GPT-5.6 Sol#Calif#Wiz#Wiz Atlas#Gemini 4 Argon#Amazon#Cloudflare