PHP Flags Third Unpatched Flaw As Attacks On PHP2Shell Bugs Reach Millions

The post PHP Flags Third Unpatched Flaw As Attacks On PHP2Shell Bugs Reach Millions appeared first on Coinpedia Fintech News

PHP has disclosed a new server vulnerability, CVE-2026-115560, only two days after rushing out emergency patches for two critical PHP2Shell flaws. The latest bug can allow attackers to take over web servers, but only on sites running a rare combination of PHP session settings. No attacks using the new flaw have been detected so far. …