PHP to Issue Emergency Release for Two Critical Remote Code Execution Flaws
PHP will publish an out-of-cycle release on October 21 at 14:00 UTC for two critical flaws rated 9.2 on CVSS v4.0. watchTowr says both allow remote code execution; no exploitation has been reported.
