TokenPost·
PHP Flags a Narrow Remote Code Execution Risk in Session Settings

CVE-2026-115560
PHP vulnerability ID
The Oct. 23 notice identifies CVE-2026-115560 and recommends disabling session upload progress until PHP’s next regular bug-fix release.