importantSYS.SOURCE: The Hacker News• 2026-10-23T16:55:43+05:30

PHP Identifies Unpatched RCE Vulnerability CVE-2026-115560 Amid Recent Security Updates

#vulnerability #security #php

PHP has identified a new remote code execution (RCE) vulnerability, CVE-2026-115560, which affects uniquely configured web applications and is deemed a low-risk issue. The project has not issued an emergency patch, instead advising users to disable a specific feature to mitigate the risk.

PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws.

The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called

Read original article

*** END OF TRANSMISSION ***

> QUEST DIAGNOSTICS CONFIRMS CYBERATTACK LEADING TO PATIENT DATA BREACH > EMUDHRA'S PRIVATE KEY COMPROMISE OF INTERMEDIATE CERTIFICATES AND MOZILLA ROOT INVESTIGATION DEADLINE OMISSION > LARGE-SCALE CYBERATTACK EXPLOITS ENTERPRISE FIREWALLS AND VPNS, LEAKING 70,000 CREDENTIALS > INVESTOR-OWNED UTILITIES CHARGE 23% MORE FOR ELECTRICITY THAN PUBLIC PROVIDERS > SHITTER: A PRIVACY-FOCUSED NITTER FORK FOR ALTERNATIVE TWITTER ACCESS > OPENSSL 4.1.0 RELEASE: ENHANCED CRYPTOGRAPHIC FEATURES AND PLATFORM SUPPORT > AI-GENERATED WIKI OF ENRON EMAILS WITH SOURCE CITATIONS > SWEDISH GOVERNMENT OFFICES PROHIBIT USE OF CHATGPT AND CLAUDE AI MODELS > PHP IDENTIFIES UNPATCHED RCE VULNERABILITY CVE-2026-115560 AMID RECENT SECURITY UPDATES > RUSSIAN STATE-SPONSORED HACKERS EXPLOIT MESH NETWORK BACKDOOR IN UKRAINE CYBERATTACK> QUEST DIAGNOSTICS CONFIRMS CYBERATTACK LEADING TO PATIENT DATA BREACH > EMUDHRA'S PRIVATE KEY COMPROMISE OF INTERMEDIATE CERTIFICATES AND MOZILLA ROOT INVESTIGATION DEADLINE OMISSION > LARGE-SCALE CYBERATTACK EXPLOITS ENTERPRISE FIREWALLS AND VPNS, LEAKING 70,000 CREDENTIALS > INVESTOR-OWNED UTILITIES CHARGE 23% MORE FOR ELECTRICITY THAN PUBLIC PROVIDERS > SHITTER: A PRIVACY-FOCUSED NITTER FORK FOR ALTERNATIVE TWITTER ACCESS > OPENSSL 4.1.0 RELEASE: ENHANCED CRYPTOGRAPHIC FEATURES AND PLATFORM SUPPORT > AI-GENERATED WIKI OF ENRON EMAILS WITH SOURCE CITATIONS > SWEDISH GOVERNMENT OFFICES PROHIBIT USE OF CHATGPT AND CLAUDE AI MODELS > PHP IDENTIFIES UNPATCHED RCE VULNERABILITY CVE-2026-115560 AMID RECENT SECURITY UPDATES > RUSSIAN STATE-SPONSORED HACKERS EXPLOIT MESH NETWORK BACKDOOR IN UKRAINE CYBERATTACK