Two critical security vulnerabilities have been discovered in the PHP programming language with the assistance of artificial intelligence (AI), potentially exposing millions of websites and servers worldwide to cyberattacks. The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, were publicly disclosed on October 21. Researchers warn that successful exploitation could allow attackers to execute code remotely on affected servers and potentially access sensitive