Security
PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
The Hacker News·October 23, 2026·1 min read
PHP has warned of another unpatched remote code execution vulnerability, CVE-2026-115560, two days after emergency fixes for PHP2Shell flaws. The new issue affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The project is not issuing an emergency fix, instead recommending turning off a certain feature.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.