PHP warns admins of two critical flaws, emergency patches coming tomorrow

What happened?

The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]

Key details

• Each vulnerability rated 9.2 under CVSS v4.0 by the PHP development team.
• PHP team reserves right to release patches earlier if details leak or exploitation appears.
• watchTowr believes vulnerabilities affect PHP versions 5, 6, 7, and 8.
• No exploitation observed in the wild despite reported information leak.
• PHP will publish full technical details, affected versions, and fixed releases with updates.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.