PHP Exploit appears live, several hours before PHP releases its patch.
https://jackalsyn.com/posts/php-up-2026.html
jackalsyn.comOnly for the curious...
Commit
a3be65d
TL;DR: In a pinch, you can apply the following in your INI as a stopgap (per the article):
session.upload_progress.enabled = Offcommit a3be65d