According to OpenAI, researchers using OpenAI models found critical PHP vulnerabilities and released a Codex skill and php2shell-checker repo to help websites assess exposure.

According to OpenAI and The Rundown AI, security firm Calif used OpenAI’s GPT-5.6 Sol to uncover critical PHP vulnerabilities also found by Wiz, prompting a two-month coordinated fix with PHP maintainers and Cloudflare, with patches now released and the NSA advising offline mitigation for unpatched systems.

According to OpenAI, its models aided researchers in discovering critical PHP engine vulnerabilities and coordinating two months of fixes so sites can safely upgrade.