Cyber Advisories
Critical Vulnerability in PHP-CGI (CVE-2024-4577)
On June 6, 2024, cybersecurity firm Devcore published an advisory detailing a critical bug in the widely used web framework PHP-CGI. Successful exploitation of this vulnerability allows a remote attacker without credentials to perform remote code execution (RCE) on a targeted machine.