This happened this past week, as far as I can tell from the logs the site is fine no issues. I did update all PHP that the site uses and it has the fixes for the recent hacks to PHP that brought a lot of government and big websites down until they were patched. The vulnerability allowed hackers to basically get remote access to your server.... so kind of nasty and its been in php for a long time but AI found it and hackers took advantage of it.
Two vulnerabilities are CVE-2026-109618 and CVE-2026-109619, so if you haven't patched any of your websites that use PHP you might want to.
potentially let an unauthenticated remote attacker execute code on a vulnerable PHP server. The flaws involve PHP's memory handling during request processing.