PHP2Shell: Critical PHP flaws hit mod_php servers hardest

[Redaktion]

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, which SAPIs are most exposed and which interim mitigations PHP recommends.

https://www.notebookcheck.net/PHP2Shell-Critical-PHP-flaws-hit-mod_php-servers-hardest.1430514.0.html