GPT-5.6 Sol Ultra finds a production pre-auth WordPress RCE (wp2shell/CVE-2026-63030) worth $500k on exploit markets for ~$25 in API credits.
What Happened
Primary Searchlight Cyber / slcyber.io technical blog post (published ~July 20, 2026; detailed prompt, exploit chain, PoC artifacts); top HN thread; follow-up X/Reddit discussion and Techzine coverage.