PHP2Shell is the worst PHP bug in a decade \u2014 and AI found it. On October 21, 2026, the PHP project shipped emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each rated 9.2 on the CVSS scale, after researchers at Wiz and Calif used frontier AI models \u2014 Gemini 4 Argon and GPT-5.6 Sol \u2014 to turn a decade-old weakness into working exploits.
The bugs allow unauthenticated remote code execution: no login, full server takeover. Wiz demonstrated the attacks against current WordPress, Drupal and Joomla deployments. The NSA told organizations to patch now or go offline.
What PHP2Shell Is
PHP2Shell is the name Wiz Research gave to a pair of memory-safety flaws in PHP’s core engine \u2014 not in WordPress or a plugin, but in the runtime underneath everything. A site can be at risk even with perfect code. The vulnerable code sat there for more than a decade, affecting every PHP release back to 5.4.
| Vulnerability | Mechanism | CVSS v4 |
|---|---|---|
| CVE-2026-109618 | Out-of-memory corruption: a fatal error leaves request data half-initialized; cleanup then treats the broken data as valid | 9.2 |
| CVE-2026-109619 | Stale global state: one request’s memory outlives its lifetime and gets reused by a later request | 9.2 |
They can also leak server memory \u2014 passwords, tokens, API keys, certificates. Per Imperva’s analysis, they can fire before a single line of your application code runs.
How AI Found What a Decade of Humans Missed
Wiz Research found the first bug on August 19, 2026, with its autonomous Wiz Atlas platform plus Gemini 4 Argon and GPT-5.6 Sol. By August 21 it had confirmed unauthenticated RCE against Drupal and WordPress; PHP shipped coordinated patches October 21.
Separately, security firm Calif found one flaw using GPT-5.6 Sol through Patch the Planet, the open-source security program OpenAI launched in June 2026 with Trail of Bits. OpenAI called the bugs “one of the most impactful security issues in recent memory.”
\u26a1 THE INFLECTION POINT
“With frontier AI models and the right tools, a single researcher completed in a week what previously would have taken a world-class team months of work.”
\u2014 Wiz Research, official PHP2Shell disclosure, Oct 21, 2026
Wiz credits Gemini 4 Argon with “a particularly significant contribution” \u2014 the models adapted working exploits across PHP versions in hours. A leak on October 20 forced PHP to pull its release forward to October 21 at 14:00 UTC.
\U0001F4C5 DISCLOSURE TIMELINE
Aug 19
Wiz finds first flaw with Wiz Atlas + Argon + Sol
Aug 20\u201321
Unauthenticated RCE confirmed vs Drupal, then WordPress
Aug 24
Reported to the PHP security team
Sep 21
PHP acknowledges; coordinated fix begins
Oct 20
Details leak; release pulled forward a day
Oct 21
Patches ship at 14:00 UTC; public disclosure
Image: Wiz Research, official PHP2Shell disclosure.
The Fallout: Patch or Pull the Plug
- The NSA urged every organization running PHP to update immediately or take systems offline (reported by CNN).
- The UK’s NCSC issued the same emergency advice: patch or go offline.
- Government services in France, the Netherlands, Finland and Australia went offline as a precaution while teams patched.
- Japan’s PM Sanae Takaichi urged operators on social media to check their PHP exposure immediately.
- Cloudflare pushed WAF protections ~9 hours before disclosure, then reported early attack traffic.
How to Protect Your Site Tonight
Updating WordPress, Drupal or plugins does not fix this \u2014 you must update the PHP runtime itself:
| Your PHP branch | Update to |
|---|---|
| PHP 8.5 | 8.5.12 |
| PHP 8.4 | 8.4.27 |
| PHP 8.3 | 8.3.36 |
| PHP 8.2 | 8.2.35 (8.2 reaches end of life Dec 31, 2026) |
- Check your version. WordPress: Tools \u2192 Site Health \u2192 Info. Server:
php -v. - On PHP 8.1 or older? No official fix exists \u2014 migrate to a supported branch or ask your OS vendor for a backported fix.
- Update the runtime, not the app, then restart PHP-FPM or your web server.
- Can’t patch tonight? Take the site offline until you can \u2014 that’s the NCSC’s advice.
Tenable’s PHP2Shell FAQ confirms PHP-FPM, mod_php, php-cgi, FrankenPHP and LiteSpeed are all in scope \u2014 highest risk on mod_php.
Image: Tenable Research, PHP2Shell FAQ.
The Money Angle: AI Security Work Just Became Scarce and Billable
PHP2Shell is the moment AI security work became visibly lucrative. OpenAI announced a $1 billion commitment in subsidized access to its Daybreak security tooling for under-resourced defenders.
- AI-assisted bug hunting. Wiz’s “one researcher, one week” math is the new standard \u2014 bounty platforms pay for this class of finding.
- Emergency patch audits for SMBs. Millions of WordPress sites need someone to check the PHP version and update the runtime tonight. A sellable service.
- Funded programs like Patch the Planet. OpenAI’s June-2026 program with Trail of Bits produced the Calif finding \u2014 labs fund the research, researchers get credit and access.
- Detection engineering. The same agents that build exploits can scale detection \u2014 the defender-side business.
Video: official Wiz YouTube channel.
FAQ
What is PHP2Shell?
Two critical flaws in PHP’s core engine \u2014 CVE-2026-109618 and CVE-2026-109619, each 9.2 CVSS \u2014 letting an attacker run code on a server without logging in. Found with AI models by Wiz Research.
Did AI really find this bug, or just assist?
Both. Wiz used Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol throughout; Calif found one flaw with GPT-5.6 Sol via OpenAI’s Patch the Planet program.
Am I affected if I run WordPress?
Likely, unless your host patched. Updating WordPress does not fix it \u2014 the PHP runtime itself must be updated (check under Tools \u2192 Site Health \u2192 Info).
Which PHP versions are patched?
8.5.12, 8.4.27, 8.3.36, 8.2.35. Every release back to 5.4 is affected; PHP 8.1 and older get no official fix \u2014 migrate.
How can this make me money?
Sell emergency patch audits to SMBs running WordPress; learn AI-assisted bug hunting; follow funded programs like OpenAI’s Patch the Planet.
PHP shipped emergency releases within a day of the leak.
Official sources: Wiz Research’s full PHP2Shell disclosure, Tenable’s PHP2Shell FAQ, Imperva’s technical analysis, CNN’s coverage of the AI discovery, and the UK NCSC’s emergency advice.
KEEP READING