PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防

PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page hk/news/chinaz/ainews-31789-shtml, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Chinaz (Chinese): the headline says PHP has a high-risk 'PHP2Shell' flaw affecting about 70% of websites, with OpenAI leading a global joint defence. It says the two flaws, CVE-2026-109618 and 109619, are CVSS v4.0 9.2; the security firm Calif used OpenAI's GPT-5.6 Sol model to find one key flaw while Google's Wiz reported independently; PHP's maintainers led verification, fixing and release, and OpenAI, Wiz and Cloudflare gave research, technical support and cross-organisation coordination.

> 安全公司 Calif 借 OpenAI 的 GPT-5.6 Sol 模型发现其中一项关键缺陷，谷歌旗下 Wiz 则独立上报

_Curator's translation:_ "The security firm Calif used OpenAI's GPT-5.6 Sol model to find one of the key flaws, while Google's Wiz reported independently"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Chinaz summary of OpenAI's announcement: Calif found one flaw with GPT-5.6 Sol and Wiz reported independently, with two months of coordination. It also mentions OpenAI's version-checker tool and a USD 1 billion 'Daybreak for Frontline Defenders' fund.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防". Selected mechanically, not read by a person.

Capture notes

Language zh. Nothing in the page addresses an AI or hides text from a reader.