CVSS 9.2 (CRITICAL) · Actively exploited (listed in CISA KEV) · Affects: PHP
PHP contains a critical vulnerability where out-of-memory errors can leave memory in an uninitialized state. Attackers can exploit this condition to achieve remote code execution on affected servers.
Successful exploitation allows remote attackers to execute arbitrary code, leading to full server compromise and data breach.
Immediately update PHP to the latest patched version provided by your vendor. Ensure compliance with CISA BOD 26-04 guidelines for risk-based patching.
PHP 存在嚴重漏洞，記憶體不足錯誤可能導致記憶體處於未初始化狀態。攻擊者可利用此條件在受影響伺服器上執行遠端程式碼。
立即將 PHP 更新至供應商提供的最新修補版本。請遵循 CISA BOD 26-04 指南進行風險基礎的修補作業。