Two critical flaws in PHP, one of the most widely used technologies for building websites, can let an attacker take over a web server without a password or any other prior access. The attacker only has to send specially crafted web requests to the server. The PHP project released fixes on October 21, 2026, but…
