PHP2Shell shows AI finds flaws faster than maintainers can fix them

Critical PHP2Shell vulnerabilities in PHP 8.2–8.5 forced sites and services worldwide offline as vendors rushed patches. OpenAI said its GPT-5.6 Sol model found one flaw and Wiz independently found both, while Chainguard shipped patched images over six hours before the agreed disclosure.

• PHP2Shell affects PHP 8.2–8.5; emergency fixes released Wednesday
• Cloudflare deployed firewall rules; Automattic secured WordPress.com, VIP and Tumblr
• OpenAI: GPT-5.6 Sol found one flaw; Wiz identified both independently
• Chainguard released patched images 6+ hours before the coordinated embargo