CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch

CISA has added PHP vulnerabilities to its catalog of known exploited vulnerabilities, indicating that exploitation attempts are being observed. The nature of the exploitation is not specified. This move is likely aimed at prompting federal agencies to take action to patch the vulnerabilities. Federal agencies are being given a short timeframe to apply the necessary patches. The vulnerabilities in question have been widely publicized. CISA's action suggests that the vulnerabilities are being actively targeted.