PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called
Contenu original affiche; la traduction localisee n'est pas encore disponible.
Ce qui s'est passé
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called
Pourquoi c'est important
The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.
Entités concernées
Voir les preuves
1 articles · 1 publication d'origine · 1 independantes
- The Hacker NewsSource primaire · Confirme · EN · 100%PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches ↗
Affirmations
- PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches Observé
Divergences
Aucune divergence importante détectée dans les preuves disponibles.
Chronologie
- Premier signalement
- Non vérifié · 57/65%
- Non vérifié · 56/65%
Mouvement de marché suivant l'événement
La réaction du marché n'est pas encore disponible pour cet actif et cette fenêtre.