New Serious PHP Vulnerabilities Released and Patched
2026-10-23T07:23:35Z•b0a4d69da3d58eacabc3b1b76d6ca4b2d415c7e279c892a4ea4a0d3c6d92198c
AI-agentsCAPTCHACellebriteDanfossFranceIoTPHPPHP-FPMcomputer-visioncritical-vulnerabilitycryptanalysisiPhoneindustrial-controlmobile-securitymod_phpmodel-backdooropen-weight-AIphp-cgiradio-zero-dayremote-code-executionsupply-chain-securityunauthenticated-exploitation
What happened
Security-focused digest covering two critical, unauthenticated remote-code-execution vulnerabilities in PHP, a possible Cellebrite radio-based iPhone unlocking zero-day, adaptive AI techniques for defeating CAPTCHAs, backdoors in modified open-weight AI models, AI-assisted cryptanalysis, and an IoT attack that manipulated connected supermarket refrigeration units. The PHP vulnerabilities present the most immediate and severe operational risk, while the remaining items describe emerging threats and research without confirmed CVE identifiers.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- schneier_blog
- Record identifier
- b0a4d69da3d58eacabc3b1b76d6ca4b2d415c7e279c892a4ea4a0d3c6d92198c
- Enrichment time
- 2026-10-23T07:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.