AI PHP ships emergency patches for two unauthenticated RCE flaws scoring 9.2 on CVSS
PHP shipped emergency patches on October 21 for two critical, unauthenticated remote-code-execution flaws scoring 9.2 on CVSS, affecting nearly every PHP-based site.