Skip to content
Sign in

Organization

PHP Foundation

Stable
01

Recent changes

  • PHP Foundation warns of unpatched RCE vulnerability CVE-2026-115560The PHP Foundation disclosed a new remote code execution vulnerability (CVE-2026-115560) two days after the PHP2Shell patch, warning that it remains unpatched; the recommended mitigation is setting session.upload_progress.enabled to 0.Stable1 sources · 2 evidence2026-10-24 13:46