The Multi-State Information Sharing & Analysis Center (MS-ISAC), a WaterISAC partner, has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the MS-ISAC advisory and the PHP Downloads page and apply the necessary updates. Read the advisory at MS-ISAC.