Security
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
The Hacker News·October 23, 2026·1 min read
PHP has warned of another unpatched remote code execution risk, CVE-2026-115560, just two days after shipping emergency fixes for the critical PHP2Shell flaws. The new issue affects only web applications with unusual configurations and is considered an unlikely risk by the project. PHP is not issuing an emergency fix, instead recommending users disable a specific feature to mitigate the threat.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.