CVE-2026-115560: third PHP2Shell bug gets no emergency fix; set upload_progress off
The PHP team will fix a third remote code execution flaw in its regular release; until then it advises disabling session upload progress. Here is who is exposed and what to do.
audiotale.net team7 min read
