PHP Releases Security Updates After Disclosure Leak Accelerates Exploit Development
Today's PHP Security Release, and How We're Strengthening PHP Security
What happened
PHP released updates across the entire PHP 8.x line addressing two remote code execution vulnerabilities, with exploits already circulating following a disclosure leak. According to the PHP Foundation, leaked CVE IDs and an accidentally published proof-of-concept video prompted an earlier release and accelerated exploit development. Wiz Research reports discovering the initial vulnerability using Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol, subsequently confirming unauthenticated RCE against Drupal and WordPress.
Read next
More changes in today’s briefingMistral releases improved Mistral Large 4 open weights for coding and cybersecurityKeep up with AI, one email a day
Model releases, price changes and compute developments, with original sources. Free, confirmed by email, and easy to unsubscribe. Read a past issue · 2026-10-30