The company Calif discovered the two vulnerabilities using OpenAI's GPT-5.6 Sol model, in connection with an OpenAI-funded review of PHP in August, AFP reports.
Cybersecurity company Wiz estimates that around 70 percent of the world's websites use PHP and says these are “some of the most serious vulnerabilities found in PHP, and probably ever in software.”
PHP released a security update on Wednesday. Sweden's National Cybersecurity Center has urged everyone to update their systems immediately - or disconnect them from the internet.
The CEO of Cloudflare, one of the world's largest internet providers, wrote on X that the company saw millions of attack attempts just hours after the flaws became known.