Comment by ashkankiani
11 hours ago
At this point, it would be fastest/most effective for the PHP foundation to deploy their own white-hat mass hacking attack to exploit the vulnerability and forcefully shutdown vulnerable servers.
I can't think of a faster way to clear out the vulnerable surface area.
Fastest, most effective and also illegal. Unless you use AI to do it I guess, then it is fine to hack people.
Yeah they should poorly set up a sandbox and ask it to fix all the vulnerable servers with the remote RCE and prepare to be surprised when it escapes the sandbox.