层叠 - The Cascading
🔴 PHP 严重漏洞被泄露和复现；欧盟机关建议 PHP 服务在修复漏洞前暂时下线。 - PHP 官网称修复会在今日 22:00 (UTC+8) 发布。 - 有说法称 mitigation 是在 php.ini 设置 session.upload_progress.enabled = Off 。 1. https://php.net/archive/2026.php#2026-10-20-1 2. cert.europa.eu/~ 3. HackerNews:50167754 CVE: CVE-2026…
#Cloudflare 已部署针对公开的 php 漏洞的 WAF 规则，无需订阅默认启用。
https://fxtwitter.com/dok2001/status/2112811965735202970
🧵 Thread • FxTwitter
Dane Knecht 🦭 (@dok2001)
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.

We are seeing early attacks emerging and are updating mitigations…