The National Information Security Vulnerability Sharing Platform (CNVD) has issued a security advisory on PHP vulnerability remediation: information system operators should conduct a comprehensive inventory of their network assets

Odaily reports that the China National Vulnerability Database (CNVD) has published a "Security Advisory on PHP Remote Code Execution Vulnerability Analysis and Remediation Recommendations." Affected users are advised to closely monitor official information, download and update to the latest version through official channels. Users who are temporarily unable to update may take measures to reduce certain attack paths and mitigate vulnerability threats, including continuous monitoring for abnormal PHP process termination, abnormal system command invocation, creation of unfamiliar processes, and abnormal file writes, while retaining logs for forensic analysis.

In its protection recommendations, CNVD stated that information system operators should further strengthen security protection by conducting a comprehensive inventory of their network assets. Following the principle of "no internet exposure unless necessary," they should minimize the public-facing attack surface of information systems. Operators that are temporarily unable to apply fixes should adopt temporary countermeasures such as network isolation, network access restrictions, and taking non-essential business systems offline.