China National Vulnerability Database issues PHP remote code execution vulnerability remediation advisory, requiring a comprehensive inventory of network assets.

On October 25, the National Information Security Vulnerability Sharing Platform (CNVD) issued the "Security Advisory on Analysis of PHP Remote Code Execution Vulnerability and Remediation Recommendations", advising affected users to closely monitor official information, download, and update to the latest version through official channels.

For users who are temporarily unable to update, CNVD recommends taking measures to reduce certain attack paths to mitigate vulnerability threats, continuously monitoring for abnormal PHP process exits, abnormal system command executions, creation of unknown processes, and abnormal file writes, while retaining logs for traceability analysis.

CNVD also advises information system operators to strengthen security protections, comprehensively audit network assets, follow the principle of "not connecting to the internet unless necessary", and reduce the public-facing exposure of information systems. Units that do not currently have the conditions to apply fixes should implement temporary countermeasures such as network isolation, network access restrictions, and taking non-essential business systems offline.