“The vulnerability had been known to the PHP team for years, but because it could not be leveraged by an attacker—at least, not a human one—it was not addressed,”

Sagi Tzadik · said date not stated · reported 2026-10-24

A Wiz security researcher explains why a long-known PHP vulnerability was not previously addressed.