New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have issued emergency fixes for two critical unauthenticated remote code execution vulnerabilities that can affect a broad range of internet-facing PHP deployments, with the highest risk in mod_php where exploitation can occur before application code runs. For CIOs and technology leaders, this is a high-severity infrastructure issue that can lead to full server compromise, service disruption, and data exposure, making rapid patching and environment-wide visibility into PHP usage an immediate operational priority.