PHP2Shell

PHP2Shell is a recently tracked product, model, or tool in public channels. The radar excerpt reads:

PHP2Shell = two critical unauthenticated RCE flaws in PHP core (CVE-2026-109618 / 109619, CVSS 9.2–10, affects PHP ≥5.4, ~70% of web). Found by Calif (with OpenAI models via Patch the Planet) and independently by Wiz Research; fixed in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 on Oct 21. OpenAI post 8.4k likes / 1.5M views; JP trend 'PHPの脆弱性'; PoC repos ikow/php2shell-poc (624★) trending on GitHub.

The recorded source label is x. Use the public URL below to verify the original post or page.

Based only on the excerpt, PHP2Shell should be understood from the facts stated there. This write-up does not invent funding amounts, model sizes, or leaderboard scores that are absent from the excerpt or URL metadata.

Confirmable points from the excerpt:

• PHP2Shell = two critical unauthenticated RCE flaws in PHP core (CVE-2026-109618 / 109619, CVSS 9.2–10, affects PHP ≥5.4, ~70% of web).

• Found by Calif (with OpenAI models via Patch the Planet) and independently by Wiz Research; fixed in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 on Oct 21.

• OpenAI post 8.4k likes / 1.5M views; JP trend 'PHPの脆弱性'; PoC repos ikow/php2shell-poc (624★) trending on GitHub.

The radar score for this entry is 0.9 (an internal ranking field, not a third-party benchmark score).

To learn more or try PHP2Shell, start from public sources:

1. Open the source link: https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/ and check the official description and availability.

2. Follow any access path mentioned in the excerpt (API, open weights, waitlist, in-product entry) using official instructions.

3. Before production use, verify license terms, regional availability, and safety limits yourself; do not assume quotas, prices, or eval scores that the excerpt does not state.