PHP Flags New Unpatched RCE Just Two Days After Emergency PHP2Shell Fixes
RedSide Security October 23, 2026 Vulnerability 8 views
PHP has disclosed a new unpatched RCE, CVE-2026-115560, just two days after emergency PHP2Shell fixes — but says it only affects unusual configurations and is recommending a feature be disabled rather than issuing another emergency patch.
Continue reading: PHP Flags New Unpatched RCE Just Two Days After Em…
