Mmastodon TechnologyInternet first seen 1 d ago, last 1 d ago, peak #2

PHP patches two critical unauthenticated remote code execution flaws

Original: Major Web Site Security Alert! PHP releases security fixes for two critical unauthenticated RCE vulnerabilities, affecti

The PHP project has released security updates fixing two critical vulnerabilities that allow unauthenticated remote code execution on any server serving web requests through PHP. The US Cybersecurity and Infrastructure Security Agency is urging organizations to patch immediately. Administrators of websites and applications running PHP are being told to update their installations as soon as possible.

Why now: PHP powers a huge share of the web, and unauthenticated RCE flaws put countless servers at immediate risk until patched.

PHPCISA

Open on mastodon →

Evidence

• Major Web Site Security Alert! PHP releases security fixes for two critical unauthenticated RCE vulnerabilities, affecting all web request-serving installations, and urges PHP users to update immediately. CISA POST: "CISA strongly urges organizations to immediately patch the… · BrentD@techhub.social · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/3139289