TokenPost·
PHP Flags New Remote Code Execution Path and Urges Users to Disable Upload Progress

3 outlets reporting
CVE-2026-115560
new PHP flaw
CVE-2026-115560 requires an unusual session setup. Users who already disabled upload progress for an earlier PHP flaw need no additional change.