Server Security

AI-Discovered PHP Zero-Day Enters Exploitation Phase With Global Scanning Surge

A PHP remote-code-execution zero-day located by an automated AI audit has moved from pre-patch disclosure into live exploitation, with millions of scan attempts recorded worldwide. Several large enterprises were targeted before the public advisory, and the UK government says routine scanning surfaced five hundred previously unregistered flaws.

[Brief] Two PHP Remote Code Execution Zero-Days Leak Ahead of Coordinated October 21 Patch

Two PHP remote code execution zero-days, CVE-2026-109618 and CVE-2026-109619, were reported as leaking ahead of coordinated disclosure, and the PHP security team has scheduled a critical patch for October 21. Servers running vulnerable builds without a filter chain in place are exposed before patching. Organisations running PHP in production should treat this as time-critical rather than routine maintenance.