PSA: Critical Security Flaw in PHP Exposes Millions of Website, Update Fast

Two critical security flaws have been discovered across all PHP implementations, affecting millions of websites including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed. The highest risk involves mod_php, where exploits can trigger unauthenticated requests before application code executes. Fixes are available in PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Due to these AI-driven security challenges, some organizations have temporarily taken their websites and online services offline to prevent exposure of vulnerable systems.