OpenAI researchers discover critical PHP security flaw

PHP security vulnerability OpenAI researchers CVE-2026-111497 Windows software security Brotli compression library

Researchers from OpenAI have identified a critical security vulnerability in the PHP programming language, specifically affecting Windows software packages. The flaw, identified as CVE-2026-111497, has been assigned a severity rating of 9.2 out of 10.

The vulnerability resides in the Brotli compression library within PHP packages. If exploited, attackers could potentially access a system's memory or execute malicious code. The issue impacts Windows releases of PHP versions 8.2, 8.3, 8.4, and 8.5.

This discovery comes just five days after developers released a fix for another significant security issue known as PHP2Shell. While there is currently no evidence that the new vulnerability has been exploited in the wild, developers have already made patched Windows packages available to mitigate the risk.

Entities

Microsoft Windows · OpenAI · PHP

Sources

Windowst és macOS-t érintő hibákat talált az AI a Bitcoin hálózatán [www.bitcoinbazis.hu]

12 days ago

Újabb biztonsági rés nyithat utat a hackereknek, már kiadták a figyelmeztetést - ORIGO [www.origo.hu]

14 days ago