Two critical vulnerabilities in PHP allow attackers to execute code remotely without credentials, affecting all web-serving deployments using supported versions.
Attackers can exploit a high-severity flaw in Risesoft-y9 Digital-Infrastructure to write arbitrary files, potentially leading to remote code execution without authentication.
