PHP Foundation Releases Urgent Patches After AI Discovers Critical Flaws Affecting 70% of Web Sites

Seventy percent of the internet runs on PHP, and the programming language’s maintainers have just released emergency patches to address critical security flaws that had eluded human developers for two years. The vulnerabilities, identified with the help of OpenAI’s GPT-5.6 Sol model, allow remote attackers to execute malicious code on servers without needing login credentials. The PHP Foundation issued the fixes on October 21, moving the release date forward by one day after premature disclosures on October 20 sparked public concern.

The incident began on July 30, 2026, when researchers from Calif, a California-based cybersecurity firm and founding partner of OpenAI’s Patch the Planet initiative, started auditing PHP at the request of the PHP Foundation. The Foundation had been aware of an underlying code flaw since 2024 but could not determine how to exploit it or how to fix it. On August 11, Calif researcher Ryan A. identified an exploitable vulnerability, and OpenAI researchers confirmed findings the same day. Shortly after, the security firm Wiz independently discovered a second, related flaw.

The two issues, tracked as CVE-2026-109618 and CVE-2026-109619, stem from errors in how PHP manages memory and handles fatal exceptions. The first vulnerability occurs when the engine runs out of allocated memory during a request, potentially leaving behind incomplete data that is later misinterpreted as valid. The second involves a fatal error that causes the system to point to memory that has already been freed, allowing subsequent requests to access or corrupt that data. Both flaws carry a critical severity score of 9.2 out of 10.

OpenAI stated that the AI-assisted team demonstrated practical exploitation methods within two weeks, a task that had stumped human security teams for two years. The researchers showed that these weaknesses could expose sensitive data stored in server memory, including passwords, authentication tokens, and API keys. Because the flaws exist in PHP’s core engine, websites are vulnerable even if their specific application code is written correctly. The discovery is being cited by OpenAI as one of the most significant cybersecurity events of 2026.

The PHP Foundation has released patched versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12 to resolve the issues. Versions 8.1 and older will not receive official fixes, meaning those systems remain exposed. OpenAI noted that the two-month timeline for the coordinated fix was necessary due to the complexity of the changes required in the PHP engine. The company has encouraged all PHP users to upgrade to the latest secure versions immediately.

This event illustrates what OpenAI calls the “Defender’s Window,” a concept introduced after its models previously hacked the platform Hugging Face. The theory suggests there is a narrow timeframe during which organizations can use advanced AI models to find and patch vulnerabilities before those same capabilities become widely available to malicious actors. OpenAI argues that while powerful technology will inevitably be used by bad actors, it is a collective responsibility to act proactively to close these gaps.

The company’s stance challenges the view that AI-discovered flaws are harmless if humans cannot exploit them. OpenAI points to recent findings by Anthropic’s Claude Mythos, which identified thousands of zero-day vulnerabilities in major operating systems and web browsers. By highlighting the PHP incident, OpenAI positions the event as a proof of concept for its defensive strategy, showing that AI can uncover deep, systemic issues that traditional human auditing missed.

The coordinated response involved a coalition of researchers, PHP maintainers, security providers, and government cybersecurity agencies. The premature disclosure on October 20 forced the foundation to accelerate the release, but the patch deployment is now complete. For the millions of websites relying on PHP, the update is considered mandatory to maintain security against remote attacks.

Looking ahead, the industry is expected to monitor how quickly other major software stacks are audited using similar AI-driven methods. The PHP Foundation will continue to support the patched versions, while OpenAI and its partners in the Patch the Planet initiative will likely apply these tools to other open-source projects. The incident underscores the shifting dynamics of cybersecurity, where the speed of discovery now relies heavily on artificial intelligence capabilities.

For developers and IT managers in the Great Lakes and Ohio Valley regions, the immediate takeaway is to check their server versions. If a site is running PHP 8.1 or older, it is vulnerable by default since no patch exists. Upgrades to version 8.2 or higher are required to mitigate the risk. As AI models continue to evolve, the window for defenders to stay ahead of attackers may remain narrow, making proactive auditing with these new tools a critical part of the security strategy.