Dear clients,

Critical vulnerabilities have been discovered in PHP and Node.js that could allow attackers to remotely execute code on a server without authentication. The developers have already released fixes and urge users to update immediately.

Fixes are available in PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12. For operating system packages, please check with your provider to confirm whether fixes are available.

Special attention should be paid to websites running PHP 5.6 and 7.x: these branches are no longer supported under PHP's standard lifecycle. Migrating to a modern version may require updates to the CMS, modules, or website code.

Before changing the PHP version, create a backup and verify compatibility.

Sincerely,
The Arsenal D Team