PHP warns of another unpatched security flaw, CVE-2026-115560, two days after emergency RCE fixes

PHP warns of another unpatched security flaw, CVE-2026-115560, that could let hackers take control of vulnerable web servers, just two days after releasing emergency fixes for critical PHP2Shell vulnerabilities.

Detected & updated continuously · Source: Nebula