Emergency Alert: Critical Unpatched PHP Flaws Discovered

Breaking news: Serious concern has arisen in the technology sector today as two unpatched critical remote code execution flaws with a CVSS score of 9.2 have been discovered in PHP, the widely used server-side scripting language. According to sources, these vulnerabilities, referred to as PHP2Shell, have triggered an emergency security alert for administrators and organizations worldwide. Security experts are urging all system operators to immediately inventory every PHP installation, including those embedded in various software, vendor appliances, and control panels such as cPanel and Plesk. With a coordinated patch release set for 14:00 UTC, priority is being given to patching all internet-facing servers, and users are advised to consult their Linux distributions and hosting providers for potential backported fixes. For PHP installations running on end-of-life branches, immediate action is required: systems should either be upgraded, taken offline, or protected behind a VPN or web application firewall until a patch is available. This alert underscores the critical need for timely security updates to mitigate the risk of unauthorized remote access.