PHP zero-days allow remote code execution; national security office urges immediate patching

Two newly disclosed PHP vulnerabilities enable arbitrary code execution on servers, affecting both legacy and current installations globally. The Slovak National Security Office issued an urgent advisory recommending immediate preventive measures. The scope of exploitation is unconfirmed, but the broad attack surface and official warning elevate the risk.