vulnerability
Imported story
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
Source: The Hacker News · Published · Last checked 1 week ago · 1 min read
Publisher excerpt From The Hacker News
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Related CVEs
CVE-2026-115560
Keywords: rceCVE-2026-115560vulnerabilityvulnerability newsThe Hacker Newscybersecurity newssecurity news Pakistan
Reference: The Hacker News — thehackernews.com ↗