CVE-2026-115560
A session-handling vulnerability announced by the PHP Group on October 23, separate from PHP2Shell. It only matters in rare setups, and PHP itself describes it as unlikely to occur.
A session-handling vulnerability announced by the PHP Group on October 23, separate from PHP2Shell. It only matters in rare setups, and PHP itself describes it as unlikely to occur.