Cloudflare says it deployed WAF mitigations for all free and paid tier customers to combat two PHP flaws by default, about nine hours ahead of public disclosure (Cloudflare)
Cloudflare : Cloudflare says it deployed WAF mitigations for all free and paid tier customers to combat two PHP flaws by default, about nine hours ahead of public disclosure — Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell.
Sources
Related
- Cohere Rerank 5 | More Relevant Context for RAG and Agents OCT 21, 2026
- New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity OCT 21, 2026
- Whop, which helps people start, run, and scale businesses and uses AI to suggest business decisions, raised $205M led by Sequoia Capital at a $5.1B valuation (Natasha Mascarenhas/Bloomberg) OCT 21, 2026
- Salt Security wins three InfoSec Innovator awards OCT 21, 2026
- OpenAI says the PHP flaws, found using GPT-5.6 Sol, "are among several significant vulnerabilities" it found and expects "similar findings to increase sharply" (OpenAI) OCT 21, 2026