@jcoglan I completely agree with you, but this PHP exploit is both dangerous and disclosed in a pretty bad manner.

As a sysadmin, this is an exploit at the scale of Shellshock, and it should have been managed much more carefully.

I can't blame admins of extremely large installations reach for the fastest and biggest gun they have at this moment.

We have patched a ton of systems (w/o AI) and reinstalling some right now.