What is CVE-2026-115560?

Disable the specific feature identified in the advisory. Apply the emergency patches released for PHP2Shell flaws. Monitor for further advisory updates from the PHP development team.

Is CVE-2026-115560 known to be exploited?

It is not marked known-exploited in this record.

How should CVE-2026-115560 be mitigated?

Disable the specific feature identified in the advisory. Apply the emergency patches released for PHP2Shell flaws. Monitor for further advisory updates from the PHP development team.

CVE-2026-115560

TThe Hacker Newsinvulnerability·Oct 25medium

PHP Warns of New Remote Code Execution Vulnerability CVE-2026-115560

The PHP development team has disclosed a new remote code execution vulnerability, CVE-2026-115560, affecting web applications with unusual configurations. The advisory was published two days after emergency patches were released for critical PHP2Shell flaws. PHP considers the risk unlikely for standard setups and is not issuing an emergency fix, instead recommending disabling the affected feature as mitigation.

11m

CVE-2026-115560

Quick answers

Related News

PHP Warns of New Remote Code Execution Vulnerability CVE-2026-115560