Two severe remote code execution vulnerabilities have been uncovered in PHP. Owing to an untimely disclosure of information, the PHP official team has preemptively rolled out an urgent security patch. PHP underpins a vast array of website construction platforms and corporate websites, making it a widely adopted technology. Should these vulnerabilities be exploited, attackers could gain complete control over servers by dispatching specifically designed network requests. At present, the full technical specifics of these vulnerabilities remain undisclosed. Security teams worldwide are vigilantly tracking any irregular server activities to probe into possible breaches. Stakeholders are urged to swiftly assess all PHP runtime environments and promptly deploy patches to systems accessible via the public internet upon their availability. Businesses relying on outdated, unsupported PHP versions should promptly disconnect them from the network or proceed with upgrades and isolation measures. Consequently, some websites might undergo brief periods of emergency maintenance or temporary unavailability in the coming days.