---
id: 7155
title: "[CVE-2024-4577] Critical RCE vulnerability in PHP CGI: everything you need to know"
cve: CVE-2024-4577
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/critical-rce-php-cgi-vulnerability"
published_at: "2024-06-10T17:08:03Z"
tags: ["rce", "php", "ransomware", "vulnerability", "patching", "cve-2024-4577"]
phying_url: "https://phying.com/item/7155"
lang: en
---

# [CVE-2024-4577] Critical RCE vulnerability in PHP CGI: everything you need to know

## Summary

Wiz explains CVE-2024-4577, a critical argument-injection RCE in Windows PHP CGI, and reports TellYouThePass ransomware exploiting it within days; patched versions and mitigations are covered.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-4577
- **Published:** 2024-06-10T17:08:03Z
- **Original:** https://www.wiz.io/blog/critical-rce-php-cgi-vulnerability
- **Phying News:** https://phying.com/item/7155