php2shell: NetScaler, PHP and what to do today
php2shell is a pair of critical unauthenticated RCE vulnerabilities in PHP's multipart form parsing, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. This post covers both halves of the NetScaler story: the management interface is exposed until Citrix ships a fix, and responder policies can shield PHP applications behind the NetScaler while you patch them.
Read More