Hello, On Thu, 22 Oct 2026 at 08:45, Christian Fischer <[email protected]> wrote: > > it might worth to mention that the subject as well as the text here > could imply / be interpreted that only PHP 8.2-8.5 are affected (and > older versions not). > > But at least https://www.php.net/archive/2026.php#2026-10-21-5 mentions > the availability for backports down to PHP 7.4 which implies that at > least versions down to 7.4 are affected as well:
It's pubblically document in the writeup that everything from PHP 5.4 is affected: https://www.wiz.io/blog/php2shell-php-rce Lukas
