Cybersecurity team to stakeholders: Patch critical flaws in PHP

THE country’s cybersecurity response team has told government agencies, critical infrastructure operators, and hosting providers to immediately patch two critical flaws in PHP, the software running on many websites and web applications.

The two vulnerabilities, which have been identified as CVE-2024-1786 and CVE-2024-1787, can be exploited by attackers to execute arbitrary code on affected systems, potentially leading to data breaches and other malicious activities.