I think I’ve identified every device on my internal networking running php, but I’d love a reliable poc I could poc that I could run before someone starts lateral movements.

If it’s easy to exploit then it should be easy to find a POC

CVSS scores are a bad measure anyway