ICYMI the big boi PHP vuln dropped ahead of tomorrow's patch, PoC and partial mitigation included https://jackalsyn.com/posts/php-up-2026.html