OpenAI model helps researchers uncover severe PHP flaws affecting most websites

A security audit powered by GPT-5.6 Sol surfaced PHP2Shell, prompting OpenAI's 'Patch the Planet' push and an expedited fix Researchers have found severe security flaws in PHP, the open-source scripting language behind about 70% of the world’s websites. They found them with help from an OpenAI model. The vulnerabilities, collectively dubbed PHP2Shell, have been described as potentially among PHP’s most severe in over a decade. Some have compared the episode to Heartbleed. The flaws surfaced during an audit carried out in August 2026 by researchers at Calif, a security firm. The team used GPT-5.6 Sol, one of OpenAI’s models, to comb through PHP’s code. Ryan Austin of Calif is credited with discovering the vulnerabilities. The bugs allow remote code execution and control over server memory.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Briefing.