WORLDTECHCloudflare logs millions of PHP exploit attempts after critical code to be run remotely patches
AI illustrationCloudflare recorded millions of attempts to exploit PHP after patches were released for critical remote code execution vulnerabilities, according to a report by Neowin. The attempts came within hours of the fixes, which allow an attacker to run programs on a server from a remote location.
Attack traffic follows the patch release
The report says Cloudflare logged millions of exploit attempts within a matter of hours after patches for the critical PHP vulnerabilities became available. The flaws are remote code execution issues, meaning an attacker could run programs on a machine from somewhere else.
Neowin reports the surge as the activity Cloudflare observed in the period following the fixes.
Operators urged to act quickly
The guidance attributed to the reporting is that site operators should update their PHP installations immediately. If they cannot update at once, the advice is to take affected sites offline until the fix is in place.
Open questions
- Which PHP versions and which specific vulnerabilities are affected?
- How many of the recorded attempts succeeded?