How One Leaked Bug Put 70% of Websites at Risk | PHP Vulnerability PHP2Shell Explained

On October 21, 2026, banks, airlines and governments from Tokyo to Amsterdam took their own websites offline. The reason: PHP2Shell (CVE-2026-109618 and CVE-2026-109619), two critical PHP vulnerabilities rated 9.2 out of 10, in the engine behind about 70% of websites with a known server language. The bugs had been hiding for more than a decade, and were found by two security teams working with AI: Calif (with OpenAI's GPT-5.6 Sol) and Wiz (with Google's Gemini 4 Argon, GPT-5.6 Sol and its Atlas tool). Then the details leaked a day early. In this Pocket Logic documentary: how a 1994 resume script became 70% of the web, the 2021 "User-Agentt" backdoor in PHP's own code, the 2024 Windows soft-hyphen bug, how PHP2Shell works with zero jargon, and the race between the leak and the patch. Remember the back pocket: security used to be humans hunting human mistakes. Now the machines are hunting too. 🔔 Subscribe to Pocket Logic for big money, wild history, and zero jargon:    / @pocketlogic   ⏱️ CHAPTERS: 00:00 - The Day the Web Unplugged 02:09 - The Accidental Empire: PHP, a Typo & a Backdoor 04:56 - The Machines Go Hunting: How AI Helped Find PHP2Shell 07:21 - The Leak & the Patch Race 09:10 - A Race Measured in Hours 📚 SOURCES & DEEP RESEARCH: Every claim was checked against reporting from 21-23 October 2026. Skits are dramatizations or illustrations. Help Net Security: https://www.helpnetsecurity.com/2026/... PHP security team (Alexandre Daubois): https://daubois.dev/blog/cve-2026-109... The Next Web: https://thenextweb.com/news/php2shell... CISA: https://www.cisa.gov/news-events/aler... Claims Journal / Bloomberg: https://www.claimsjournal.com/news/na... ANA: https://www.ana.co.jp/en/ch/special-n... NOS: https://nos.nl/artikel/2636055-websit... The Hacker News: https://thehackernews.com/2026/10/php... SecurityWeek: https://www.securityweek.com/php2shel... watchTowr: https://watchtowr.com/intelligence/ph... W3Techs: https://w3techs.com/technologies/deta... Sophos (2021 backdoor): https://www.sophos.com/en-us/blog/php... PortSwigger (2021): https://portswigger.net/daily-swig/ph... SonicWall (CVE-2024-4577): https://blog.sonicwall.com/en-us/?p=5... php.net history: https://www.php.net/manual/en/history... #PHP2Shell #PHPVulnerability #CyberSecurity #PHP #Documentary #TechHistory #PocketLogic