Two critical security vulnerabilities found in PHP

Two critical security vulnerabilities have been discovered in PHP, a programming language used to build websites and server-side applications. They could allow an attacker to execute commands on a system, and no prior authentication would be needed.

What this means

A vulnerability is a software flaw that an attacker can exploit to gain access to a system or control over it. In this case, the risk is the ability to run commands remotely. The attacker does not have to prove their identity, which is why the flaws are rated critical.

The available information is limited. The source does not say which PHP versions are affected, what the identifiers of the vulnerabilities are, or whether security fixes are already available. It is therefore not yet clear how widely systems are affected.

System administrators and developers who use PHP are advised to follow official announcements about these vulnerabilities.