Remote code execution (RCE)
Japanese リモートコード実行
A weakness that lets someone outside run programs on a server over the internet. It is the most dangerous kind of vulnerability, and both PHP2Shell and CVE-2026-115560 are of this kind.
Remote code execution is a weakness that lets someone run commands or programs on a server from across the internet, without ever being near the machine. It is not just like losing your house key; it is more like a stranger being able to switch your home appliances on and off from far away. That is why security agencies treat it as one of the most dangerous kinds of vulnerability.
Watch out If news about a vulnerability mentions remote code execution or RCE, it is wise to look into it right away rather than putting it off. PHP2Shell and CVE-2026-115560 were both of this kind. First check whether your site runs an affected version, and if it does, update by following your hosting company's instructions.
Source: KISA KrCERT (2026-10-24), PHP security advisory (2026-10-21)