PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet

Frontier AI models uncovered critical memory-safety vulnerabilities in core PHP affecting all versions since 5.4, enabling unauthenticated remote code execution on 70% of global websites. A patch was released on October 21, 2026, but immediate action is needed to secure affected servers.

This Wire brief sits within Fusion42's coverage of AI Frontier Models, Cybersecurity and Enterprise Software, and 19 sources have reported it between 21 Oct 2026 and 22 Oct 2026.