Two critical PHP vulnerabilities found with AI knock thousands of websites offline
Thousands of websites, including European government portals, went offline after the disclosure of two critical vulnerabilities in PHP, the language that according to W3Techs powers about 70% of identifiable websites. Developers released four patches and urged immediate updates. The flaws, rated 9.2 out of 10 on the CVSS v4.0 scale, could allow unauthenticated remote code execution. They were detected using artificial intelligence models by researchers at Calif with OpenAI and by Google's Wiz.
In 35 seconds
- Two critical PHP vulnerabilities forced administrators worldwide to patch or disconnect their sites.
- Developers released four patches; the CVSS v4.0 score is 9.2 out of 10 and allows unauthenticated remote code execution.
- Calif with OpenAI and Google's Wiz detected the flaws using artificial intelligence models.
IASummary generated by artificial intelligence from a story by EL PAÍS. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.