81/100
The PHP Foundation released a critical security update for two flaws that allow unauthenticated remote code execution. CISA says they affect all PHP installations serving web requests. CISA and the UK NCSC urge immediate updates to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, and Cisco and Palo Alto Networks have published product impact advisories.