Post

🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline. Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.

21/10/26, 4:09 pm3 reposts8 likes

Socket

@socket.dev

The vulnerabilities let attackers execute code on web servers without logging in. Cloudflare is already seeing exploits in the wild. Changing php.ini settings won't fully protect you. WAF rules are a stopgap. Patch the PHP runtime now. socket.dev/blog/php-cri...

socket.devPHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites OfflinePHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.