Situation
A security vulnerability was found in PHP and has been assigned CVE-2026-115560.
For more information, you can find the official announcement here:
PHP News Archive | 23 Oct 2026
Affected product version
Unknown at this time, as a full security advisory has not been released.
Impact
PHP news archive indicates a possible RCE (Remote code execution), as a full security advisory has not been released.
Call to action
Setting the PHP INI option session.upload_progress.enabled=0 can mitigate the vulnerability until an update is released by PHP. The article below explains how to add this setting.
Comments
0 comments
Article is closed for comments.