Developer rushes to warn former startup as severe PHP RCE bugs drop

vista8 · x · 2026-10-21

Developer vista8 (132K followers) said he immediately warned his former startup colleagues about the two PHP RCE vulnerabilities rated 9.2/10, since the company's servers all run PHP, calling the bug "pretty serious." A reminder that many legacy startups still operate PHP stacks — official fixed versions are 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

Related event: PHP's php2shell: Two Unauthenticated RCE Flaws Found with Help from OpenAI Models(49 posts)→

Original post →

More from coding & agent

coding & agent channel →