The 2026 PHP Vulnerability or PHP Hack refers to two vulnerabilities, referred to as CVE-2026-109618 and CVE-2026-109619, found in PHP code, that could have allowed a hacker to access a website's file system and database and force code on a website.The vulnerabilities were purportedly discovered by Cyber company Wiz using AI and were made publicly known in late October 2026 by the National Security Agency's cybersecurity division. The vulnerabilities caused numerous websites, including government websites, to temporarily shut down as they waited for an update to patch the exploits. The patch was released on October 21st, 2026.The PHP vulnerabilities also inspired online discourse and memes, including posts about the claim that AI was used to discover the vulnerabilities.Read More