PHP warns admins to prepare for emergency security updates to fix critical RCE flaws leaked online

PHP is warning administrators to prepare for emergency security updates to fix two critical remote code execution vulnerabilities rated CVSS 9.2, affecting PHP 5 through 8. The flaws were leaked online before patches were sent out, and the exploit affects more than 40 percent of the internet, raising the risk of attacks on infrastructure.

Detected & updated continuously · Source: Nebula