PHP Security Release Addresses Critical RCEs

Security researchers reports that both vulnerabilities seems to be remote code execution (RCE) vulnerabilities. As no technical details are currently available for the vulnerabilities, apart from their CVSS scores of 9.2, which indicate the potential for unauthenticated remote code execution, it is currently unknown which part of PHP is involved, whether it’s reachable over a plain web request, or whether it depends on a particular configuration. This notice will be…