前沿AI模型被用于开发PHP远程代码执行漏洞利用程序
一篇报道称，Calif和Wiz的两支安全团队使用前沿AI模型发现了两个PHP远程代码执行漏洞并构建了利用程序。这两个漏洞为CVE-2026-109618和CVE-2026-109619，以PHP2Shell名义推广。报道称，PHP基金会2024年的审计已经发现CVE-2026-109618，但未能根据该理论问题构建利用程序，也未能就修复方案达成一致。报道援引的估算称，PHP2Shell可能影响互联网的70%，涉及数千个重要网站，但该报道未为这一估算提供依据。另有讨论对补丁发布前是否曾出现可用的利用尝试存在分歧。
报道称，前沿AI模型帮助将理论漏洞转化为完整利用程序，显示AI可能加快利用程序开发，并缩短安全补丁发布后的响应窗口。
The last week has seen a flurry of severe and critical software vulnerabilities affecting thousands of major sites and sending people into a panic. What’s going on here, and what can we do about it?
The bugs
If we want to understand what’s going on in the world of software security at the moment, we need to understand what’s going on with all these bugs. I’m not a cybersecurity expert, so I’m going to link to external explanations instead of going into the gory technical details myself as these people are always going to do a better job at that.
PHP2Shell – CVE-2026-109618 and CVE-2026-109619 (a.k.a. “the big one in the news”)
Two different security teams, one from California security company Calif (as part of OpenAI’s “Patch the Planet” program) and another from Israeli-U.S. cloud security company Wiz (they’re part of Google Cloud, apparently), both found these two Remote Code Execution (RCE) bugs in PHP. They were both using frontier AI models (a.k.a. LLMs, specifically GPT-5.6 Sol/Gemini 4 Argon) to find these vulnerabilities and build the exploits.
#PHP#PHP2Shell#CVE-2026-109618#CVE-2026-109619#Calif#Wiz#OpenAI#GPT-5.6 Sol#Gemini 4 Argon#PHP Foundation