ainotis Join
My notis

Checked fact 288226 Oct 2026Safety and security

The notice says: "Since this setup is unlikely in practice, we are handling it in the regular release cycle and will publish a full advisory for CVE-2026-115560 with the next release."

The exact words it rests on

Since this setup is unlikely in practice, we are handling it in the regular release cycle and will publish a full advisory for CVE-2026-115560 with the next release.

What the source said when we opened it, on 26 Oct 2026.

The source

Security advisory: Critical remote code execution vulnerabilities, update now (21 Oct 2026)
PHP Group · 2026-10-21

Checked

Checked by the notis newsroom on , against the source above.

In the story

PHP suggests disabling session upload progress; the flaw needs a runtime serialize-handler switch. 26 Oct 2026

Cite this fact

Anyone may quote this address. It does not change; if we correct the story, this page says so.