Well, if it’s not the “PHP” vulnerability, it’s going to be one of the many others found and patched by LLMs in the last few months. A quick rummage found :
- https://en.wikipedia.org/wiki/PHP2Shell – PHP
- https://lwn.net/Articles/1104192/ – Linux kernel Multipath TCP issue (probably affects anyone running ‘go’ based daemons?)
- https://lwn.net/Articles/1101643/ – eMudhra – intermediate CA compromise
- https://nodejs.org/en/blog/vulnerability/october-2026-security-releases – various NodeJS issues (Brotli, DNS, SSL … )
Unfortunately I suspect this might be the new norm (having to make sure updates have been applied frequently and you are running a supported stack).