NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#session-handling

2 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedphp2 php2shell2 proof-of-concept1 rce1 remote-code-execution1 unpatched1

2 stories, newest first · one card per story

BleepingComputer2d agohigh

PHP shares mitigation for unpatched RCE CVE-2026-115560

Only unusual session-handler setups are affected; admins should keep session.upload_progress.enabled set to 0 until the next release.

5 sources3 min readphp rce

3

Cyber Security News4d agohigh

Public PoC tests critical PHP session flaws dubbed php2shell

A repository claims PHP 5.4.0–8.5.11 are affected, but PHP has not yet confirmed versions or fixed builds.

30 sources5 min readphp php2shell

7