PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released patches for two critical unauthenticated remote code execution vulnerabilities, collectively tracked as PHP2Shell. Cloudflare reported observing early attacks targeting the vulnerabilities before the patches were released.
CERT24