CVE-2024-4577

Actively exploited

CISA lists CVE-2024-4577 in its Known Exploited Vulnerabilities catalog, which means exploitation has been observed. The entry applies to PHP Group PHP.

• Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Public exploit: Cataloged public exploit.

• Rapid7 Metasploit: PHP CGI Argument Injection Remote Code Execution (2026-09-23 21:40:29.350562+00)

  Rapid7 catalogs an exploit module for this CVE. Module availability does not establish exploitation in the wild or applicability to your environment.

• Exploit-DB: PHP CGI Module 8.3.4 - Remote Code Execution (RCE) (2026-09-23 21:40:27.335989+00)

  Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.