Two PHP zero-day vulnerabilities got leaked today. CVE-2026-109618 and CVE-2026-109619. We don't have many details but it looks bad from what I've gathered.
https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities
"PHP2Shell" tells me all I need to know about how bad these vulnerabilities are.
And of course it's because of indians in tech...
Took almost a day for them to vibe a patch, probably still with some kind of vulnerability.
By the ways this is why the oekaki and the uploaded are dead at the moment.
I picked a bad language to specialize in. I want to make CGI Lua but CGI Java already exists in servlet form. Maybe I should make my next personal project in Java.
Now I have one more good reason to learn c/perl CGI
laziness is a powerful thing..
Damn, I just realized I spent all this time redeveloping the calendar for 7.4.33 because of Cantan and World2ch, and now both sites are going to be using 8.x... What a waste of effort.
>archive of our own is down now
I suspect that's partially because of the PHP vulnerabilities. Maybe it spooked them enough to do a hardware and software upgrade?
It wasn't, it was a data breach of some kind.