Tech

PHP: The three little letters wreaking havoc across the web

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 22/10/2026, 17:01:25 UTC.

Briefings

Two critical PHP vulnerabilities discovered by security firm Wiz have endangered up to 70% of the internet, powering major platforms like Wikipedia and WordPress. The exploits were active days before official patches, forcing the Internet Archive offline and causing shutdowns of Japanese mobile games. The vulnerabilities affect every PHP version since roughly 20 years ago, including unsupported legacy systems. GPT-5.6 identified the flaws, and the PHP2Shell exploit specifically targeted Cloudflare.

Key points

• Two critical PHP vulnerabilities discovered by security firm Wiz endanger up to 70% of the internet, powering major platforms like Wikipedia and WordPress.
• The exploits were active days before official patches, forcing the Internet Archive offline and causing shutdowns of Japanese mobile games.

Context

PHP is a widely used programming language powering critical web services. The vulnerabilities affect every version since roughly 20 years ago, including unsupported legacy systems. GPT-5.6 identified the flaws, and the PHP2Shell exploit specifically targeted Cloudflare.

Limitations

Evidence is limited to security firm reports and mentions of specific platforms affected. Some details about the exact nature of the vulnerabilities remain unconfirmed, and the timeline of initial discovery versus full disclosure is not fully detailed.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 22/10/2026, 17:06:35 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeidg3vw3spmwvvdq3rb66kzmn66a3btkhwsxhwps73oczl3bfwji7q