AI-assisted exploit turns PHP memory error into server code execution
PHP2Shell vulnerability in legacy PHP allows arbitrary code execution via out-of-memory error, discovered and patched with AI tools before any exploitation.
1
Stories per day · 30 days
1 RSS
Relatedphp5php2shell2rce2ai-tools1apache-kafka1broker1denial-of-service1end-of-life1php-src1protocol1zend1
7 stories, newest first · one card per story
Stories tagged #out-of-memory
Apache Kafka brokers can run out of memory from protocol arrays (CVE-2026-111108)
Code-generated readers size arrays from a sender-declared count checked only against remaining buffer bytes.
Animated explainer walks through how PHP2Shell works
A Lobsters post points to a video that tries to explain a single-request PHP server compromise in its first three minutes.
Unofficial patch targets PHP2Shell OOM in PHP 5.4–5.6
The community backport covers unsupported PHP 5.4, 5.5, and 5.6 for CVE-2026-109618 and CVE-2026-109619.
PHP 8.2–8.5 OOM RCE cited again (CVE-2026-109618)
Christian Fischer's October 23 reply only links a CrowdStrike blog about PHP RCE zero-days.
PHP 8.2–8.5 RCE via out-of-memory corruption (CVE-2026-109618)
An allocation failure during request setup can leave incomplete state reachable, rated CVSS v4.0 9.2.
CVE-2026-67211: Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer
Apache OpenNLP CVE-2026-67211: unbounded map pre-sizing in SymSpellModelSerializer enables out-of-memory denial of service in opennlp-symspell 3.0.0-M4/M5.