2026-10-21 04:27 UTC
had to take down a couple wikis because of the PHP shitstorm. There's another exploitation framework that has been posted publicly (not the PHP2SHELL shown in the vid), but I haven't really looked into it so I won't link
php.net is 504ing, so here's the tweet:
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Replies (3)
-
@harblinger@wizard.casa 2026-10-21 04:42
lol got my first security refusal using codex (I hardly mess with that stuff anyway so not surprising)
-
@harblinger@wizard.casa 2026-10-21 05:21
o yeah just remembered to take down nextcloud too :retard:
-
@harblinger@wizard.casa 2026-10-21 05:40
I guess namesilo uses PHP https://namesilo.com/