NCSC-2026-0443: Critical vulnerabilities fixed in PHP
Two critical vulnerabilities were fixed in PHP. They can be exploited remotely without authentication through web requests to execute arbitrary code. All PHP installations that process web requests are affected.
CERT24