FrankenPHP

Reported Context (5)

Every PHP installation that serves web requests is at risk, including PHP-FPM, Apache mod_php, php-cgi, FrankenPHP and LiteSpeed, according to the PHP security advisory. PHP Patches Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
affect all PHP installations that serve web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed. PHP Releases Emergency Patches for Two Critical PHP2Shell RCE Flaws
"All PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed" are at risk, the PHP team said. The risk is highest for mod_php, where two working proof-of-concept PHP Patches Two Critical, Remotely Exploitable Zero-Day Vulnerabilities
Affected products The PHP team has indicated that all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed are impacted. PHP Emergency Update Fixes Two Critical RCE Flaws; PHP2Shell Exploit Reported
Prioritize Apache mod_php hosts as it’s the confirmed exploitation path. FPM, php-cgi, FrankenPHP and LiteSpeed are all at risk, but mod_php has been demonstrated exploitable. PHP2Shell: Emergency PHP Fixes and Detection Guidance for Two Critical RCE Flaws

CVE (2)

People (8)

MITRE ATT&CK (2)

Vendors (7)

Products (14)

Tools (8)

Industries (1)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.