Critical PHP CVE: Remote Root on 75% of the Web
Oct 20, 2026 · 569 messages · 71 active members
A pre-announcement CVE leaked allowing unauthenticated remote shell via session.upload_progress — affecting virtually every WordPress, Drupal, and Magento deployment. Mitigation: set session.upload_progress.enabled = Off…
Read full digest →