New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released patches for two critical vulnerabilities in several PHP versions, including 8.5.12, 8.4.27, 8.3.36, and 8.2.35. These vulnerabilities can allow unauthenticated remote code execution. All PHP users are urged to update immediately. The risk applies to all PHP installations that serve web requests, with various configurations affected. The highest risk is considered to be for mod_php, where an exploit can trigger an attack before any application code runs.