PHP Exploits Circulating Ahead of Critical Patches, Bürgel Warns

The timing is the story here: exploits are already circulating before the fixes exist, which inverts the usual patch-then-exploit sequence and shortens the window for defenders to react. This lands on operators running exposed PHP services, who are being asked to reduce their attack surface now rather than wait for the scheduled release. The open question is how quickly patches are applied once they ship — and whether restricting exposed services in the interim meaningfully limits the blast radius.