news-tldr.com

The important facts, the open questions, and the sources — without the churn.

← Latest briefing

Technology

PHP Foundation releases patches for two critical security vulnerabilities

The PHP Foundation says the flaws could allow unauthenticated access to sites running PHP, which powers about 70% of websites.

Updated Oct 22, 2026 · 18:15 UTC2 reports

The short version

  • The PHP Foundation released security patches for two critical PHP vulnerabilities rated 9.2 out of 10.[Engadget]
  • The foundation says the flaws could let bad actors gain unauthenticated access to sites running PHP.[Associated Press]
  • PHP powers about 70% of websites globally, according to reporting.[Associated Press]
  • OpenAI said it led a coalition that worked on the PHP flaws, and Wiz said it used AI to help find them.[Associated Press]

Key facts

  • The PHP Foundation released security patches for two critical vulnerabilities rated 9.2 out of 10 on the severity scale.[Engadget]
  • The PHP Foundation said the vulnerabilities could allow bad actors unauthenticated access to sites running PHP.[Associated Press]
  • PHP powers about 70% of websites globally.[Associated Press]
  • OpenAI said it led a coalition of researchers and security providers that addressed PHP vulnerabilities over the past two months.[Associated Press]
  • Researchers at Wiz said they independently used AI to identify the vulnerabilities.[Associated Press]

What remains uncertain

  • The reporting describes the flaws as potentially exploitable and does not confirm that attacks have occurred.[Associated Press]

Sources

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.