PHP exposed two high-severity vulnerabilities enabling unauthenticated remote code execution, affecting about 70% of websites worldwide

Market Pulse Geopolitical Atlas Corporate Database Shanghai-Shenzhen Stock Market Data Claw🦞

More Tech Real Estate Auto Consumer Energy Health Environment Livelihood ESG Digital Talk Comparison China Reform Special Reports Obituaries

Data Caixin First Line

Private Classes Conferences Promotion Sports Enthusiast Enterprise Users App Download Help

About 70% of websites worldwide face high-risk vulnerabilities; cybersecurity problems surge in the AI era

2026-10-23 18:00:42 Source: Caixin.com Author: Yang Zirui Responsible Editor: Qu Yunxu

Text | Caixin Yang Zirui

October 23, 2026 18:00

The vulnerability found in the programming language PHP this time can achieve unauthenticated remote code execution. The National Information Security Vulnerability Sharing Platform recommends that affected users immediately upgrade to the latest version

Related reports: AI attacks enter a new stage; Hong Kong will strengthen cross-departmental cybersecurity coordination to prevent cybersecurity risks from evolving into financial risks; Regulators plan to issue tiered and classified management rules; OpenAI releases a new cybersecurity model as AI-driven minute-level full-chain risks challenge traditional security; Zhipu releases new model GLM-5.3 emphasizing model programming and cybersecurity capabilities; Anthropic releases a new large model with outstanding cybersecurity and vulnerability discovery capabilities

[Caixin.com] Cybersecurity problems surge in the AI era. On October 21, the official website of the programming language PHP stated that two critical vulnerabilities had been discovered, which can achieve unauthenticated remote code execution. The two vulnerabilities are code-named "PHP2Shell" in the industry. It is estimated that about 70% of websites worldwide are written in PHP.

U.S. AI giant OpenAI said in a post the same day that the PHP vulnerabilities were discovered by AI security company Calif using OpenAI's model GPT-5.6 Sol. OpenAI also said that frontier AI discovered this batch of vulnerabilities before attackers, securing a "defense window" for maintainers and security service providers to prepare fixes and protective measures before the vulnerabilities were disclosed.

Recommended: Enter the Caixin database to check investment information such as company stock price trends and structural personnel changes at any time.

The Caixin Robotics Industry Index (RII) has been released. Click to learn about industry trends

Responsible Editor: Qu Yunxu | Layout Editor: Li Donghao Image Editor: Li Bojing

Vision | Multiple attacks on Saudi Arabia, control of the Bab el-Mandeb Strait: why have the Houthis grown powerful? Photo Gallery | 2,500 "No Kings" rallies held across the United States; Trump's approval rating falls to a new low of 33% Vision | High school student protests trigger a chain reaction; street violence spreads in France and shakes the political situation Photo Gallery | Young people in many countries across Europe, America and Asia protest in the streets, calling for reforms in education, housing and politics Photo Gallery | 550,000 people protest in France, triggering violent clashes; more than 2,300 arrested Week in the World | Trump's approval rating hits a new low again; school collapse in Pakistan kills 33 Photo Gallery | North-South Korea confrontation escalates; North Korea announces resumption of loudspeaker broadcasts to South Korea and reinforcement of border village defenses Photo Gallery | A magnitude 7.0 strong earthquake in Baqing County, Nagqu City, Tibet kills 16; aftershock risk remains

Audio-Visual Recommendations

[Special Presentation] Warm Years, Everbright Companion [Caixin Time] Dialogue with Wei Shangjin: How does the gender structure affect individual choices and economic operation [Caixin Time] Dialogue with Tian Xuan: China's solution for patient capital [Special Presentation] "Hello Hot Shenzhen" in hot release, passion fully on [Caixin Time] Dialogue with Miao Yanliang: The old and new monetary orders alternate, grasp the key decade of RMB internationalization [Special Presentation] Finding 100 interesting lifestyles Miao Yanliang: If the economy and technology are world-class, must the currency also be world-class? [Special Presentation] The world is getting faster, I am getting "slower"

Caixin.com's news edition email is newly upgraded! Carefully compiled by Caixin.com's editor-in-chief, delivered regularly every workday, every piece is a blockbuster, credible and citable.

19:31 Analysis | Israel's election is about to kick off; "Teflon" Netanyahu faces a major test

19:27 First batch of active ETFs issued; 3 products "close fundraising in one day"

19:06 Personnel Watch | Anhui takes the lead in completing the provincial party committee transition; 49-year-old He Chunkuan becomes the country's youngest Standing Committee member

18:56 Citi officially approved to become China's 7th wholly foreign-owned securities firm

18:35 Next week's outlook: The Fifth Plenary Session of the 20th CPC Central Committee convenes; Israel holds parliamentary elections

18:28 Musk accused of ordering speed limits on Ukraine's Starlink system; some U.S. congressmen threaten investigation

18:12 Humanoid robot breaks Bolt's record, where does it win?

18:02 Tokyo sees first "true summer day" in late October; Japan's heat risk extends into autumn

18:00 About 70% of websites worldwide face high-risk vulnerabilities; cybersecurity problems surge in the AI era

17:41 COSCO Shipping: The underlying logic of energy transportation has changed dramatically; how to find certainty?

Content page end Bottom begin

The intellectual property rights of the content published on Caixin.com are exclusively owned or held by Caixin Media and/or relevant rights holders. Without permission, any use including reproduction, excerpting, copying and mirroring is prohibited.

Radio and television program production and operation license: Jing No. 01015 | Publication operation license: No. Zhi 100013

finder end Site-wide billing statistics code Global site tag (gtag.js) - Google Analytics