PHP patches two critical unauthenticated RCE flaws after exploit leak
A public PoC dubbed PHP2Shell targets PHP 5 through 8; backports exist for 7.4, 8.0, and 8.1, but attacks are not confirmed.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #session-upload
PHP warns of unlikely code-execution flaw CVE-2026-115560
Disable session upload progress until a routine release; the October 21 PHP2Shell patches do not fix it, and no attacks are reported.