Two critical vulnerabilities found in the PHP programming language

Two critical security vulnerabilities have been discovered in PHP, a programming language widely used to build websites and web applications. They could allow an attacker to execute commands on a system without prior authentication, meaning without logging in or passing any other identity check.

Flaws of this kind are considered especially dangerous because the attacker does not need an account on the system. If such a vulnerability is exploited, a server running PHP could be put at risk.

The source headline states that preventive security measures have been introduced in Latvia in response. The available source text does not specify which measures were taken, who introduced them, which PHP versions are affected, or whether the vulnerabilities have already been exploited in attacks.

The source gives no further details on the technical nature of the flaws or on fixes.