PHP core RCE rated CVSS 10.0 lands Oct 20; eBPF tool spots exploitation early
cyb3rops · x · 2026-10-21
Security researcher cyb3rops disclosed that a CVSS 10.0 RCE vulnerability in PHP core will be detailed on October 20, with patches only for PHP 8. Until then, he recommends container isolation plus tight monitoring, and released process-watcher: a dependency-free eBPF-based static Linux binary (amd64/arm64) that logs every subprocess spawned by PHP processes with full command lines, since exploitation will likely show up as suspicious subprocess spawns. He also notes LLMs are likely already being used to reproduce the bug.
Related event: PHP core hit by CVSS 10.0 RCE flaw as emergency patch looms(4 posts)→
More from Safety
- Trusted intermediate CA 'leaks' with private key equal to 4, perfectly recreating the XKCD joke — arthurcolle · 2026-10-21
- Cloudflare discloses compromised eMudhra intermediate certificates, urges patching — Cloudflare Blog · 2026-10-21
- Package manager outage forces skipping release-age checks, ideal for supply chain attacks — sloppenheimer · 2026-10-21
- Anthropic ran Claude autonomously over 25 OSS codebases and found 493 attack-surface issues — chrisrohlf · 2026-10-21
- Same Text, Opposite Verdicts: DIY Test Exposes Unreliable AI Detectors — CommonExplanation711 · 2026-10-21
- Claudini: AI autoresearch discovers SOTA jailbreak algorithms with 80% ASR — maksym_andr · 2026-10-21