Source: bleepingcomputer.com
The PHP security team has issued an urgent warning to administrators about two critical vulnerabilities affecting PHP. Information about the flaws was reportedly leaked ahead of their scheduled coordinated disclosure, prompting an accelerated emergency patch release. Administrators are advised to prepare for immediate updates to be released the following day. The early leak increases the risk of exploitation before patches are widely applied. No specific CVE identifiers or technical details were included in the initial warning. The situation underscores the dangers of premature vulnerability disclosure. PHP is widely used across web infrastructure globally, making the potential impact significant. Administrators running PHP-based systems should monitor official PHP channels and apply patches as soon as they are available.
