According to The Defiant, the National Security Agency has advised PHP users to either apply available patches or temporarily take affected systems offline. PHP has released fixes for two security flaws rated at 9.2 severity. These vulnerabilities could allow unauthenticated attackers to execute code on web servers. The agency emphasized that prompt remediation is necessary due to the high risk posed by the flaws. No further details on specific deployments, timelines, or additional guidance were provided in the advisory.
