I'm behind and catching up on it all, but seeing this just made me laugh aloud at the size of impact:
"We confirmed pre-auth RCE on the following PHP apps as well as arbitrary PHP scripts in some instances.
- WordPress 7.1.2
- Drupal 11.4.3
- Joomla 6.1.4
- MediaWiki 1.46.2
- Roundcube 1.7.4
- Magento 2.4.9
- phpMyAdmin 5.2.3
- Nextcloud 35.0.1
- Laravel 13.11
- Symfony 8.1
- WHMCS"
