PHP and Wiz Research disclosed two critical PHP runtime vulnerabilities on Oct 21, 2026. CVSS base score 9.2 each. Research involved coordination with OpenAI models (Google cites Gemini 4 Argon contribution to exploit development and patch validation).
Vulnerable versions: PHP 5.4 through 8.5.11. Patched in 8.5.12, 8.4.27, 8.3.36, 8.2.35.
Google Cloud guidance: rebuild and redeploy on Cloud Run, GKE, App Engine flex; App Engine standard PHP 8.2+ receives automatic patches.