OpenAI 与 Wiz 独立发现 PHP2Shell 核心漏洞，影响约七成 Web
原标题：[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
AI 摘要
OpenAI 的 Patch the Planet 项目与安全公司 Wiz 分别独立发现 PHP 核心内存破坏漏洞 PHP2Shell（CVE-2026-109618、CVE-2026-109619），据报影响约 70% 的 Web 应用，可导致 WordPress、Drupal、Joomla 等 CMS 的未认证远程代码执行。OpenAI 称使用 GPT-5.6 Sol 辅助发现，Wiz 则称使用 Gemini 4 Argon 与 GPT-5.6 Sol，双方与 PHP 基金会等进行了约两个月的协调修复。Cloudflare 在补丁发布前部署了 WAF 临时缓解规则，NSA 也建议尽快更新。
正文节选
Almost 2 months ago, OpenAI introduced Daybreak for Frontline Defenders, a $1B subsidy for access to Daybreak cyber models and products. That funding came into use almost immediately, as major vulnerabilities in PHP were independently discovered by two parties: Ryan Austin, a researcher at the security firm Calif, as part of the OpenAI “Patch the Planet” project in August 2026 using GPT 5.6 Sol: … as well as Wiz, recently acquired into Google Cloud (using Gemini 4 Argon and GPT-5.6 Sol, as well