Two critical PHP vulnerabilities rated 9.2 out of 10 could enable unauthenticated remote code execution and memory exposure, prompting emergency patches and warnings to update affected systems.