/dev/null
Sign in

Commit

c424e23

Raymond Baghumian@Rayiumir
It is important to note that this should not be conflated with "PHP2Shell." Previous vulnerabilities involved different attack vectors, and patches were released for specific versions of PHP; this new issue, however, requires a separate review of configurations and the implementation of a temporary workaround.
QuotingSLSam LABBE@slabbdev
PHP's second session RCE in three days is real — and PHP itself says you can probably ignore it. CVE-2026-115560: session serialize-handler confusion. The ‼️ BREAKING unpatched RCE ‼️ repost got all three lines wrong. The actual php.net advisory (Oct 23): informational advisory,…
Attached image
php.netPHPPHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

commit c424e23