So apparently there's a PHP remote code execution zero vulnerability going to be released (and patched) on Thursday going back to PHP 5+ 😬
Commit
180f209
It's set to be released tomorrow (Wednesday) now because some people couldn't keep their mouths shut apparently. https://www.php.net/archive/2026.php#2026-10-20-1
php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
💀💀💀
I feel like this is happening a lot because people armed with agents but no experience with disclosure keep finding vulns