PHP2Shell Two Unpatched Critical PHP RCE Flaws CVSS 92 Trigger Emergency Security Alert

This story is developing and was written before PHPs scheduled 1400 UTC release on October 21 Once the release is out the affected and fixed versions below are confirmed by the official advisory PHP will ship an outofcycle security release at 1400 UTC today October 21 for two critical vulnerabilities that its security team has rated 92 on the CVSS v40 scale but has not described