PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

PHP has released a security update for two critical Remote Code Execution (RCE) vulnerabilities in its PHP 8.2 through 8.5 branches. While PHP has not yet released the fixes, security researchers are urging organizations to take immediate action, including inventorying PHP installations and preparing for a potential update. The vulnerabilities are named php2shell.