PHP2Shell
Intro
**PHP2Shell** is a recently tracked product, model, or tool in public channels. The radar excerpt reads: > PHP2Shell = two critical unauthenticated RCE flaws in PHP core (CVE-2026-109618 / 109619, CVSS 9.2–10, affects PHP ≥5.4, ~70% of web). Found by Calif (with OpenAI models via Patch the Planet) and independently by Wiz Research; fixed in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 on Oct 21. OpenAI post 8.4k likes / 1.5M views; JP trend 'PHPの脆弱性'; PoC repos ikow/php2shell-poc (624★) trending on GitHub. The recorded source label is `x`. Use the public URL below to verify the original post or page.
Explain
Based only on the excerpt, **PHP2Shell** should be understood from the facts stated there. This write-up does not invent funding amounts, model sizes, or leaderboard scores that are absent from the excerpt or URL metadata. Confirmable points from the excerpt: - PHP2Shell = two critical unauthenticated RCE flaws in PHP core (CVE-2026-109618 / 109619, CVSS 9.2–10, affects PHP ≥5.4, ~70% of web). - Found by Calif (with OpenAI models via Patch the Planet) and independently by Wiz Research; fixed in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 on Oct 21. - OpenAI post 8.4k likes / 1.5M views; JP trend 'PHPの脆弱性'; PoC repos ikow/php2shell-poc (624★) trending on GitHub. The radar `score` for this entry is `0.9` (an internal ranking field, not a third-party benchmark score).
Usage
To learn more or try **PHP2Shell**, start from public sources: 1. Open the source link: <https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/> and check the official description and availability. 2. Follow any access path mentioned in the excerpt (API, open weights, waitlist, in-product entry) using official instructions. 3. Before production use, verify license terms, regional availability, and safety limits yourself; do not assume quotas, prices, or eval scores that the excerpt does not state.