AI Tools Identify Long-Standing Critical PHP Security Flaws

Security firms Calif and Wiz, utilizing AI tools including OpenAI's technology, have uncovered critical vulnerabilities (CVE-2026–109618 and CVE-2026–109619) in the PHP programming language that existed for over a decade. These flaws could enable unauthenticated code execution on web servers. This development highlights AI's growing capability in vulnerability detection while also raising concerns about potential AI-powered attacks.