Comment by qudat

> There are now multiple posts from vuln research teams all of whom have working RCE POCs against unmodified PHP applications.

pics or it didn't happen