PHP advises safeguards against narrowly exploitable code execution flaw
PHP’s security team has issued mitigation guidance for a newly identified remote code execution vulnerability, CVE-2026-115560, while saying the unusual conditions required for exploitation make widespread exposure unlikely. The maintainers advised administrators to disable session upload progress until the next scheduled bug-fix release. The vulnerability has not received an emergency patch…
We haven't written up this one. Arabian Post has the full story — the link below goes straight to it.
