Both problems could result in large-scale attacks and require massive cleanup.

R.bussarin/Shutterstock

The web is a bit of a hot mess today following the discovery of two severe vulnerabilities, according to security releases seen by Ars Technica . The first involves TLS certificates with extremely weak encryption that could affect everything from VPNs to IoT devices. The other is a severe PHP programming language vulnerability impacting CMS systems including WordPress and Drupal. Both problems could result in large-scale attacks and require massive cleanup jobs, security experts said.

gPHP Foundation said on X that it's releasing security patches for two critical vulnerabilities rated 9.2 out of 10 on the severity scale.…