‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html
The Hacker NewsPHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell PatchesPHP warns CVE-2026-115560 may enable code execution in unusual session setups and advises disabling session upload progress pending a routine fix.
commit bef1483