šŸ–‹ļø PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert šŸ–‹ļø

This story is developing and was written before PHP's scheduled 1400 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official advisory. PHP will ship an outofcycle security release at 1400 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described. .

šŸ“– Read more.

šŸ”— Via "The Hacker News"

----------
šŸ‘ļø Seen on @cibsecurity
290000

4

1h

44

12h

87

24h

174

48h

0%

ER

First 24 hours
HourGrowthTotal
06:34+1h+44
07:34+2h+37
08:34+3h+411
09:34+4h+415
10:34+5h+318
11:34+6h+422
12:34+7h+426
13:34+8h+329
14:34+9h+433
15:34+10h+437
16:34+11h+340
17:34+12h+444
18:34+13h+448
19:34+14h+351
20:34+15h+455
21:34+16h+358
22:34+17h+462
23:34+18h+466
00:34+19h+369
01:34+20h+473
02:34+21h+376
03:34+22h+480
04:34+23h+383
05:34+24h+487
By day
DateGrowthTotal
Thu, Oct 22+8787
Fri, Oct 23+87174
Sat, Oct 24+87261
Sun, Oct 25+29290
Mon, Oct 260290
Tue, Oct 270290
Wed, Oct 280290
Thu, Oct 290290
Fri, Oct 300290
Sat, Oct 310290
Sun, Nov 10290
Mon, Nov 20290
Tue, Nov 30290
Wed, Nov 40290
Thu, Nov 50290