
PHP patches two critical RCE flaws exploited before they were disclosed
Two unauthenticated remote code execution vulnerabilities in PHP were actively exploited for four days before emergency patches shipped on October 21, taking government and hospital websites offline worldwide.










