[Ministry of Industry and Information Technology NVDB Issues Risk Alert on Critical PHP Remote Code Execution Vulnerabilities] Odaily Planet Daily News: Recently, the Network Security Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology detected two critical remote code execution vulnerabilities in PHP, posing severe risks. PHP is an open-source server-side scripting language widely used for web development. Due to these two critical remote code execution vulnerabilities, unauthenticated attackers can exploit them to remotely execute arbitrary code, leading to server control, sensitive information leakage, business interruptions, and other damages. Affected PHP versions include: - 8.5 series < 8.5.12 - 8.4 series < 8.4.27 - 8.3 series < 8.3.36 - 8.2 series < 8.2.35 - 8.1 series and earlier versions Currently, the PHP security team has fixed the vulnerabilities and issued a security advisory. Relevant organizations and users are advised to immediately conduct comprehensive inspections, promptly upgrade to the latest secure versions, or adopt temporary protective measures such as taking systems offline, disabling session upload progress functionality, implementing network isolation, and restricting network access. Additionally, strengthen network security monitoring and management, and promptly update credentials such as accounts, passwords, and keys to mitigate the risk of cyberattacks.