The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Researchers used AI-assisted work to identify critical PHP flaws that could enable remote code execution; fixes were released on October 21, 2026.

• The report says two PHP vulnerabilities could let attackers run code on affected servers without authentication; it gives the flaws a severity rating of 9.2 out of 10.· 1 source
• Fixed PHP versions listed are 8.5.12, 8.4.27, 8.3.36 and 8.2.35, released on October 21, 2026.· 1 source
• The report recommends identifying affected installations, applying updates and checking logs and systems for possible compromise before patching.· 2 sources