PHP Security Vulnerability
Started
Affects: Websites and web servers running vulnerable PHP versions.
Two critical PHP vulnerabilities have been disclosed that could allow unauthenticated attackers to execute commands on vulnerable web servers, potentially compromising websites and sensitive data.
Affected PHP branches have patched releases available:
PHP 8.2.35
PHP 8.3.36
PHP 8.4.27
PHP 8.5.12
Action Required: Website owners should confirm their PHP version with their hosting provider or web developer and update to the appropriate patched release. Unsupported PHP versions should be upgraded to a currently supported branch.
Update: Oct 21, 9:15 AM
Aero IT recommends verifying PHP versions and patch status for all managed websites. Exposure depends on the PHP version, configuration, and whether the vulnerable components are in use.