https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html
Never a dull day in PHP land....

The Hacker NewsPHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell PatchesPHP warns CVE-2026-115560 may enable code execution in unusual session setups and advises disabling session upload progress pending a routine fix.
commit 4c238ce