Re:PHP2Shell: AI uncovers critical RCE in PHP
by schleck8 on Wednesday October 21, 2026 @11:49AM
(#50182999)
Looking at the technical deep dive further down the article, this is worse than Log4Shell if you need a point of reference. It's one of the two worst exploits that ever publicly surfaced, up there with EternalBlue.
[ Parent
| on HN ]
Re:PHP2Shell: AI uncovers critical RCE in PHP
by sigmarule on Wednesday October 21, 2026 @01:21PM
(#50184467)
How reliably exploitable is it, if you know? EternalBlue was fairly close to a point-and-click exploit iirc, the early PoCs I’ve seen for this so far pin things for specific builds/images/configs, one consuming asan output, etc.