Php修复关键漏洞，警告AI驱动的利用风暴
php基金会修复了影响数百万个网站的两个关键漏洞，安全专家警告使用AI工具快速利用漏洞。
the php foundation detailed two critical vulnerabilities, cve-2026-109618 and cve-2026-109619, which impact all php installations serving web requests going back to php version 5. only php 8.2 and newer are still supported and will receive patches. security experts warn of potential dire consequences of overlooking unpatched systems, with lukasz olejnik saying 'this is not a drill'. the vulnerabilities could allow attackers to gain dangerous remote control of victim systems, with ai tools potentially speeding up exploitation.