Interesting read from @jaydrogers (ServerSideUp) about a new, yeah new, PHP CVE.
( someone get Jay on /dev/null )
https://serversideup.net/blog/php-cve-2026-115560-session-upload-progress/
Server Side UpA new PHP CVE was announced. Here's what you need to know | Server Side UpCVE-2026-115560 is a second PHP RCE this week, separate from the October 21 fixes. It needs a rare setup to exploit, and one setting blocks it.
commit 09165ab