The National Vulnerability Database (NVDB) of the Ministry of Industry and Information Technology (MIIT) has issued an urgent alert regarding two critical remote code execution vulnerabilities in PHP. Attackers can directly compromise target systems without any authentication. Approximately 70% of websites globally rely on PHP, facing immediate security threats. These vulnerabilities, discovered by researchers from Calif and Wiz in the US using AI models, have been present for over a decade and affect multiple PHP versions, including those in the 8.5 series below 8.5.12. MIIT advises relevant organizations and users to immediately investigate and upgrade to the latest secure versions, or implement protective measures such as temporary offline operation or network isolation. Currently, countries like Finland, France, and the Netherlands have proactively taken down some government services. Companies such as All Nippon Airways, Nomura Securities, Mitsubishi UFJ Financial Group, Asahi Group, Sega, and Bandai Namco in Japan have also announced the suspension or maintenance of some online services. Alibaba Cloud and Tencent Cloud have also issued urgent warnings.