
1 min read

Two critical PHP RCE vulnerabilities allow unauthenticated remote code execution, exposing failures in asset inventory, change management, and patching speed.

In 2026, AI tools uncovered critical PHP vulnerabilities faster than maintainers could patch, exposing systemic risks and challenging traditional open-source security models.

Two critical PHP zero-day RCE vulnerabilities emerged in 2025, impacting all versions before 8.2. AI accelerated exploit discovery, shrinking patch windows dangerously.