ainotis Join
My notis

Checked fact 257123 Oct 2026Safety and security

Calif recommends as partial mitigations: "For PHP-FPM, disable session upload progress with session.upload_progress.enabled=0 and set memory_limit=-1." and "For mod_php, set memory_limit=-1."

The exact words it rests on

For PHP-FPM , disable session upload progress with session.upload_progress.enabled=0 and set memory_limit=-1 . For mod_php , set memory_limit=-1 . These changes do not replace a patch.

What the source said when we opened it, on 23 Oct 2026.

The source

php2shell: a tale of two PHP remote vulnerabilities
Calif · 2026-10-21

Checked

Checked by the notis newsroom on , against the source above.

In the story

PHP patches two critical remote code execution flaws 23 Oct 2026

Cite this fact

Anyone may quote this address. It does not change; if we correct the story, this page says so.