⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2024-4577

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

PHP CGI RCE on Windows — actively exploited in the wild. Disable PHP CGI mode or apply patches. Affects XAMPP and other Windows PHP deployments. Mass scanning observed within hours of disclosure.

📋 Official Description

PHP CGI argument injection vulnerability on Windows systems allowing unauthenticated remote code execution via crafted URL parameters. Affects PHP in CGI mode on Windows.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →