So apparently there's a PHP remote code execution zero vulnerability going to be released (and patched) on Thursday going back to PHP 5+ 😬
Commit
c7670f7
Maybe a troll but here is (apparently) a video of it working https://x.com/calif_io/status/2112634137609654627?s=20
X (formerly Twitter)Calif (@calif_io) on Xphp2shell: We have been coordinating with the PHP Foundation, OpenAI, and Wiz to make sure everyone gets updated in time. Our partners in the cloud and network protection space have been tracking this as well. More details will be released Wednesday, 21 October 2026 at 14:00 UTC (https://t.co/Pqho…
commit c7670f7