SecurityThe Hacker Newsabout 2 hours ago
PHP Warns of Unpatched RCE Risk
3 min read
PHP issued a warning on October 23 regarding a new unpatched remote code execution vulnerability, CVE-2026-115560, affecting web servers two days after emergency patches for earlier flaws. The advisory recommends disabling session upload progress until the next routine release, as the specific configuration required to trigger the issue is considered unlikely in practice.
Level
Hype check
Tap to vote and see what everyone thinks.
