PHP warns administrators of two critical flaws; emergency patches coming
The PHP security team warned administrators to prepare for fixes for two critical vulnerabilities. According to PHP’s official advisory, both flaws were assigned a CVSS v4.0 score of 9.2, with updates scheduled for release on October 21 at 14:00 UTC. Information about the vulnerabilities reportedly leaked before the planned disclosure.
CERT24