CVE-2019-11043

PHP-FPM is the part of PHP that runs website code. This bug is like a mistake in how it handles input size—an attacker can use it to make the server run their own instructions remotely. If exploited, it can lead to a full compromise and ransomware-style attacks.

This matters if your business runs web applications using PHP-FPM on servers where PHP is in the affected version range (PHP 7.1.x below 7.1.33, 7.2.x below 7.2.24, or 7.3.x below 7.3.11) and your PHP-FPM setup matches the vulnerable configuration. It’s a network-remote issue and does not require a login or user interaction.

Reachability depends on whether an attacker can reach the web server that forwards requests to PHP-FPM, and whether the specific FPM configuration that triggers the flaw is in use.

This is RED because attackers have used it in ransomware campaigns (CISA KEV lists it as known exploited), and public exploitation is available. The safest move is to treat any affected PHP-FPM deployment as compromised-risk and remediate immediately.