Recent updates from PHP maintainers address two critical vulnerabilities in several versions, including PHP 8.5.12 and 8.4.27, that pose risks of unauthenticated remote code execution. All users are advised to update promptly to mitigate potential attacks.