The 'BREAKING' unpatched PHP RCE that wasn't !
What CVE-2026-115560 actually requires
https://dev.to/slabb/the-breaking-unpatched-php-rce-that-wasnt-what-cve-2026-115560-actually-requires-2ema

DEV CommunityThe 'BREAKING' unpatched PHP RCE that wasn't: what CVE-2026-115560 actually requiresA 'BREAKING: unpatched PHP RCE' alert is going around. The actual php.net advisory for CVE-2026-115560 says something quieter, stranger and more useful: an unlikely config combo, the same mitigation you already applied, and three lines of grep to know if it concerns you.
commit 8b63fe2