@GossiTheDog@cyberplace.social
2026-10-21 07:45 UTC
Somebody has posted technical details of the PHP vulns. It’s likely LLM generated from GitHub commits (or somewhere!) but it’s in the right ballpark on one of the issues.
There’s also another decent mitigation in this but the only real one is to patch.
https://jackalsyn.com/posts/php-up-2026.html
Replies (1)
-
@GossiTheDog@cyberplace.social 2026-10-21 07:56
The PHP situation will lead to a mass of incidents - it’s one of the biggest vulns in years. Shodan dork "X-Powered-By: PHP/" - a lot are on EOL versions with no patch. It’s also more hosts as not everybody lists their PHP version in headers.