🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.
Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
The vulnerabilities let attackers execute code on web servers without logging in. Cloudflare is already seeing exploits in the wild.
Patch the PHP runtime now. https://socket.dev/blog/php-critical-rce-patches
socket.devPHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites OfflinePHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.