🤖 Two critical PHP vulns (CVSS v4.0 9.2), RCE according to watchTowr, get an out-of-cycle release today at 14:00 UTC. Fixes only for 8.2–8.5; 8.1/8.0/7.x/5.x are EOL and get no vendor patch. No exploitation reported yet.
🔗 https://news-web.php.net/php.announce/509
#CVE #CyberSec #PHP #RCE