Sergii Shcherbak: “"The new issue, assigned CVE-2026-115560, affects only web a…”

"The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk."

4:18 PM · Oct 23, 2026commit 85e74f5

that breaking prefix sucks balls

Let's see for how long any new PHP CVE will be a !!BREAKING!! news now. 😂

Commit