News · via Infosecurity Magazine
PHP Publishes Mitigation Advice for New RCE Flaw
PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected
CVE-2026-115560
Coverage tagged "CVE-2026-115560".
News · via Security Affairs
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked…
News · via oss-security
PHP Informational advisory: Session upload progress (CVE-2026-115560)
Posted by Alan Coopersmith on Oct 23 https://www.php.net/archive/2026.php#2026-10-23-1 advises:
News · via The Hacker News
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects…