BlockBeats report: On October 22, China’s Ministry of Industry and Information Technology’s Network Security Threat and Vulnerability Information Sharing Platform (NVDB) detected two critical remote code execution vulnerabilities in PHP, posing severe risks. PHP is an open-source server-side scripting language widely used in web development. Due to these two critical remote code execution vulnerabilities, unauthenticated attackers can exploit them to execute arbitrary code remotely, leading to server compromise, sensitive data leakage, and service disruption. Affected PHP versions include: 8.5 series < 8.5.12, 8.4 series < 8.4.27, 8.3 series < 8.3.36, 8.2 series < 8.2.35, and all versions 8.1 and earlier.
The PHP Security Team has now patched the vulnerability and issued a security advisory. We recommend that relevant organizations and users immediately conduct a comprehensive review, upgrade to the latest secure version, or implement temporary protective measures such as temporary offline status, disabling session upload progress functionality, network isolation, and access restrictions. Additionally, enhance cybersecurity monitoring and management, and promptly update account credentials, passwords, and keys to mitigate the risk of cyberattacks.