well shit, looks like yet another PHP-related CVE has been found...
the official PHP page says it's an unlikely RCE attack vector, but the fact that RCEs in PHP are being found this fast, back-to-back, is really worrying...
https://www.php.net/archive/2026.php#2026-10-23-1
php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.