The National Computer Emergency Response Team (CERT-PH) has warned system administrators, Web developers, and hosting providers to patch two critical vulnerabilities in PHP that could allow attackers to remotely execute malicious code on affected servers.