PHP has released emergency updates for two severe runtime flaws named PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619. Affecting versions back to PHP 5.4, the issues highlight risks where AI assists in weaponizing legacy primitives. Fixes land in versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Researchers from Wiz, Calif., and OpenAI who discovered and reported the vulnerabilities noted that artificial intelligence helped turn decades-old, dormant problems into operational att...