Unit 42 flagged two critical PHP CVEs. CISA lists an exploited Ivanti Connect Secure flaw. A TCP use-after-free sits at CVSS 9.8. Patching is only half of it: inventory every version you run, then look for shells left behind. We do that review, ask us, estimate in a day.
Was this useful?