The Ministry of Industry and Information Technology's network security threat and vulnerability information sharing platform monitoring revealed that PHP has two remote code execution super-dangerous vulnerabilities, which are seriously harmful. PHP is an open source server-side scripting language widely used for web development. Since it has two ultra-dangerous remote code execution vulnerabilities, unauthenticated attackers can use it to remotely execute arbitrary code, causing harm such as server control, sensitive information disclosure, and business interruption. The affected PHP range includes: 8.5 series<8.5.12, 8.4 series<8.4.27, 8.3 series<8.3.36, 8.2 series<8.2.35, 8.1 series and earlier. Currently, the PHP security team has fixed the bug and issued a security bulletin. It is recommended that relevant units and users immediately carry out comprehensive investigations, upgrade to the latest secure version in a timely manner, or take temporary protective measures such as temporary offline, disabling session upload progress functions, network isolation, and network access restrictions; strengthen network security monitoring and management, and promptly modify credentials such as accounts, passwords, and keys to prevent the risk of cyber attacks.

Disclaimer:Webull uses external vendor Google Translation Service for news translations where we endeavour to ensure these are correct, however, we recommend that you please double-check this information accordingly. Webull is not responsible for translation errors or issues.