There's a third PHP2Shell bug, but it won't get an emergency fix
Summary
A third bug in the PHP2Shell utility has been discovered. Unlike previous critical vulnerabilities, this new bug will not receive an emergency fix from the developers.
IFF Assessment
FOE
The discovery of an unpatched critical vulnerability represents a potential risk to systems that use the affected software.
Defender Context
This situation highlights the ongoing risk posed by unpatched vulnerabilities in commonly used software utilities. Defenders should proactively scan their environments for any instances of PHP2Shell and implement compensating controls or mitigate the risk if patching is not immediately feasible.