Article
Critical Vulnerabilities in PHP Require Immediate Patching
These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP. The vulnerabilities affect all PHP installations serving web requests, including Apache with mod_php (Note: PHP considers this highest risk), PHP-FPM, php-cgi, FrankenPHP and LiteSpeed. Organizations should immediately update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 to fix these vulnerabilities.
**CISA Issues Urgent Warning Over Critical PHP Vulnerabilities That Could Let Hackers Take Over Web Servers** The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning urging organizations to immediately patch critical...
