Even after PHP2Shell, blast radius matters more than a CVSS score
// AI summary
PHP2Shell shows attackers exploit critical vulnerabilities quickly, emphasizing that limiting service account and API key access is as important as fixing flaws to reduce breach damage.
// from the source
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]