Even when PHP isn’t set to CGI mode, however, the vulnerability may still be exploitable when PHP executables such as php.exe and php-cgi.exe are in directories that are accessible by the web ...

Here's a quick tutorial on how to setup Nginx with PHP support. The key? The installation of fastCGI, aka PHP-FPM, so Nginx can serve PHP files to clients.

CVE-2024-4577 is a critical PHP-CGI argument injection flaw patched in June that impacts PHP installations running on Windows systems with PHP running in CGI mode.