php2shell: patch, then plan
Two critical PHP vulnerabilities, CVSS 9.2, unauthenticated remote code execution, and no safe server configuration. What to do this week, why your version number cannot tell you if you are exposed, and why patching to PHP 8.2 buys you ten weeks.




