Checked fact 288226 Oct 2026Safety and security
The notice says: "Since this setup is unlikely in practice, we are handling it in the regular release cycle and will publish a full advisory for CVE-2026-115560 with the next release."
The exact words it rests on
Since this setup is unlikely in practice, we are handling it in the regular release cycle and will publish a full advisory for CVE-2026-115560 with the next release.
What the source said when we opened it, on 26 Oct 2026.
The source
Security advisory: Critical remote code execution vulnerabilities, update now (21 Oct 2026)
Checked
Checked by the notis newsroom on , against the source above.
In the story
PHP suggests disabling session upload progress; the flaw needs a runtime serialize-handler switch. 26 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.