CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch

Wait 5 sec.

CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing.