Comment on What's going on with PHP?

• slazer2au@lemmy.world ⁨1⁩ ⁨day⁩ ago

  Yep, two remote code execution rated at 9.2

  www.php.net/archive/2026.php#2026-10-20-1

  source

  • call_me_xale@lemmy.zip ⁨1⁩ ⁨day⁩ ago

    The ratings seem to be overblown, however. This is nowhere near some of the vulnerabilities people have compared it to, like heartbleed or log4j

    source

    • slazer2au@lemmy.world ⁨1⁩ ⁨day⁩ ago

      The leaked info incorrectly called it a 10 so people are acting like a 10. But an unauthenticated RCE is always a big issue.

      source

      • call_me_xale@lemmy.zip ⁨1⁩ ⁨day⁩ ago

        It’s an unauthenticated RCE in very specific circumstances under particular configurations. We haven’t even seen functional exploits in the wild yet.

        source

        • -> View More Comments
• TheButtonJustSpins@infosec.pub ⁨1⁩ ⁨day⁩ ago

  Two were, yeah.

  source