Two critical PHP core vulnerabilities enable pre-application RCE with CVSS 9.2. Cloudflare and Amazon confirm active exploitation. When the engine itself is compromised, https://deafnews.it/en/article/php2shell-when-the-engine-becomes-the-target-every-downstream-defense-fails
DeafNewsPHP2Shell: When the Engine Becomes the Target, Every Downstream Defense Fails | DeafNewsTwo PHP core vulnerabilities enable pre-application-code RCE on mod_php with CVSS 9.2. Cloudflare and Amazon confirm active in-the-wild exploitation.