PHP has issued a warning regarding a new remote code execution vulnerability, tracked as CVE-2026-115560, just two days after releasing emergency fixes for the PHP2Shell flaws. The issue affects web applications with specific non-standard configurations. The maintainers are not releasing an immediate patch, recommending administrators disable a particular feature to mitigate potential risks instead.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →