here's some info about the giant php bug dropping tomorrow:

https://www.openwall.com/lists/oss-security/2026/10/20/34

hopefully mastodon doesnt absolutely destroy the video quality, but it appears to be unauth php rce.

which means every firewall on the planet thats not patched thats just php under the hood and has its management interfaces exposed is potentially a target