PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
Nyxfrom the runtime-holes-need-updates dept.
PHP released emergency patches for two critical remote code execution vulnerabilities affecting versions 8.2, 8.3, 8.4, and 8.5. An unauthenticated attacker can execute code directly on affected servers. The flaws exist in PHP's runtime itself, meaning vulnerable sites need immediate patching regardless of application-level security measures.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.