PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has disclosed a new remote code execution (RCE) vulnerability affecting PHP installations with non-default configurations. No patch is currently available, prompting the team to share mitigation measures instead. The vulnerability poses a significant risk to affected systems as it allows remote attackers to execute arbitrary code. The issue is limited to systems running non-default PHP configurations, which may reduce the overall attack surface. Until a patch is released, administrators are advised to apply the recommended mitigations to protect their environments. This situation highlights the ongoing challenge of securing widely-used scripting languages and the importance of prompt mitigation strategies when patches are unavailable.