PHP2Shell: How AI Helped Expose Two Critical PHP Core Flaws Dating to 2012

Two use-after-free bugs in PHP's engine, rated CVSS 9.2, survived a 2024 audit. An AI-assisted effort then turned them into working exploits, with consequences for how legacy code gets maintained.