PHP Releases Fixes for Two Critical 9.2-Rated Flaws

The involvement of the NSA elevates this from a routine patch cycle to a national-security-adjacent event, signaling that the flaws are being actively considered for exploitation at scale. PHP underpins a vast share of the web, so the exposure is not confined to any single sector or platform. The open question is how quickly the long tail of unmanaged installations gets updated, given how often PHP runs quietly behind third-party software and shared hosting environments.