<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Unpatched on CuraSec</title><link>https://curasec.metacog.co.kr/tags/unpatched/</link><description>Recent content in Unpatched on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 23 Oct 2026 15:44:28 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/unpatched/index.xml" rel="self" type="application/rss+xml"/><item><title>PHP RCE vulnerability disclosed with mitigation but no patch yet</title><link>https://curasec.metacog.co.kr/insights/2026-10-23-php-shares-mitigation-for-new-rce-vulnerability-with-no-patc/</link><pubDate>Fri, 23 Oct 2026 15:44:28 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-10-23-php-shares-mitigation-for-new-rce-vulnerability-with-no-patc/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Plan:&lt;/strong> PHP RCE with no patch warrants near-term action: verify whether your PHP deployments use the affected non-default configuration and apply the PHP team&amp;rsquo;s published mitigation steps immediately; revisit once a patch is released.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Skip&lt;/strong>&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>