It’s not a vulnerability, it’s added involuntary functionality.
#php2shell — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #php2shell, aggregated by home.social.
-
Today's news inspired me to finally put my Nextcloud instance behind tailscale, only to discover that tailscale requires the use of a third party identity provider. I wasn't excited about any of the options and I'm not up for spinning up my own OIDC service tonight so I just shut the whole thing down for now. #php2shell
-
Got your fridges cool again?
OpenWRT routers patched up?*Right now* would be a good time to, uh, completely turn off any LAMP-style HTTP server or any service that runs any version of PHP until patches land in your server distro. Seriously.
There's an unauthenticated unconditional remote code execution exploit against anything running PHP 5/7/8: https://cert.europa.eu/publications/security-advisories/2026-018/ …and of course it leaked, so it'll be exploited immediately.
#PHP #PHP2shell #infosec #security #sysadmin #infrastructures
-
-
