PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has released mitigation measures for a new remote code execution vulnerability affecting systems with non-default configurations. No patch is currently available for the flaw, which could allow attackers to execute arbitrary code. Administrators are advised to apply the recommended mitigations to reduce risk until an official fix is released. The team continues to investigate the issue.