AI Uncovers Critical PHP Vulnerabilities, Triggering Global Cybersecurity Response

Cybersecurity firms Wiz Research and Calif, utilizing AI tools, have identified critical, decade-old vulnerabilities in PHP, the programming language that underpins approximately 70% of the world's websites. Following the disclosure, millions of exploitation attempts were detected within hours, prompting governments and organizations worldwide to issue urgent warnings and implement patches. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow unauthenticated remote code execution.