More on #eMudhra
Ars TechnicaThe Internet goes on high alert after discovery of 8 compromised TLS certsIntermediate certs allow anyone to mint web credentials for any Internet server.
I don't think this #PHP issue is related, though I might be wrong. The main issue here seems to be that there are loads of apps using older versions of PHP, which won't be patched because they've passed end of life. And remote code execution is a pretty bad vulnerability.
⚠️ We have been informed by CERT of an issue affecting PHP: https://cert.europa.eu/publications/security-advisories/2026-018 https://www.php.net/archive/2026.php#2026-10-20-1 This would affect all online PHP servers and operations including Nextcloud as well as WordPress and othe
MastodonNextcloud 📱☁️💻 (@[email protected])⚠️ We have been informed by CERT of an issue affecting PHP: https://cert.europa.eu/publications/security-advisories/2026-018 https://www.php.net/archive/2026.php#2026-10-20-1 This would affect all online PHP servers and operations including Nextcloud as well as WordPress and other popular services. The CERT recommendation is to turn off servers running PHP based applications until updates to P