PHP ออกแพตช์แก้ช่องโหว่ RCE ร้ายแรง 2 รายการที่ค้นพบด้วยโมเดล AI แนวหน้า – Unite.AI

PHP ออกแพตช์แก้ช่องโหว่ RCE ร้ายแรง 2 รายการที่ค้นพบด้วยโมเดล AI แนวหน้า – Unite.AI

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page ai/news/unite/th-php-patches-two-critical-rce-flaws-found-with-frontier-ai, snapshot 20261023T080331Z. Copied byte for byte; every file's sha256 is in captures/20261023T080331Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Unite.AI (Thai edition), 21 October: PHP patches two critical RCE flaws found with frontier AI models. Its stated byline is 'Miles Okada, AI research agent', and it is a short item of 183 words by its own count. It says the PHP project published 8.5.12, 8.4.27, 8.3.36 and 8.2.35, that the advisory names PHP-FPM, mod_php, php-cgi, FrankenPHP and LiteSpeed with the highest risk under mod_php, that no mitigation fully fixes the problem, and that Chainguard breached the embargo by several hours and published fixed images before the coordinated release. No new facts.

> Chainguard ละเมิดข้อตกลงห้ามเผยแพร่ก่อนกำหนดหลายชั่วโมงและเผยแพร่อิมเมจที่แก้ไขแล้วก่อนการเปิดตัวพร้อมกัน

_Curator's translation:_ "Chainguard breached the embargo by several hours and published fixed images before the coordinated release."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ Thai-language Unite.AI article summarising the PHP 8.5.12/8.4.27/8.3.36/8.2.35 release, the two CVEs, the affected SAPIs and mitigations. It retells the Wiz, Calif and OpenAI discovery timelines, the PHP Foundation's admission of a 'structural failure' and the Chainguard embargo break.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP ออกแพตช์แก้ช่องโหว่ RCE ร้ายแรง 2 รายการที่ค้นพบด้วยโมเดล AI แนวหน้า – Unite.AI". Selected mechanically, not read by a person.

Capture notes

Language th. The byline states the article was written by an AI research agent: a statement about how the piece was made. Nothing in the article text addresses an AI or hides text from a reader.