PHP2Shell: Critical PHP flaws hit mod_php servers hardest

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, which SAPIs are most exposed and which interim mitigations PHP…

Preview courtesy of Notebookcheck. The full article opens on their site.