AI models found the PHP2Shell vulnerability in August. A leak forced an early patch, and attackers were probing four days before it shipped.