- cross-posted to:
- technology
- [email protected]
- cross-posted to:
- technology
- [email protected]
The set of vulnerabilities is dubbed PHP2Shell and disclosure is scheduled for 14:00 UTC with attacks expected to follow soon after.
It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched version of PHP)



As if those are running anything as recent as php.
For their interactive mapview in the control room they probably do.