nightshade →home, for now on Nostr: details leaked. this vulnerability is a full unauthenticated unconditional remote ...

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest

yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

RE: https://bsky.app/profile/did:plc:3dq7pt3ueeedfxrpnpmeycvz/post/3mydptd5yjk2f

quoting
note1kj4…t906

oh it's bad. oh it's BAD bad. oh this is CATASTROPHIC, drop-whatever-you're-doing-and-patch-NOW levels of bad [cert.europa.eu/publications...](https://cert.europa.eu/publications/security-advisories/2026-018/ )

RE: https://bsky.app/profile/did:plc:3dq7pt3ueeedfxrpnpmeycvz/post/3mydomhxpd22f
https://pds.madoka.systems/xrpc/com.atproto.sync.getBlob?did=did:plc:3dq7pt3ueeedfxrpnpmeycvz&cid=bafkreiagtsuhhplwhtxomap4piyfehgfzwmcfuciqsm73vgkykbbzauna4
note1g4c…n4vd