CVE の正式な記録の公開前です
セキュリティの情報源の記事に出た番号をもとに載せています。番号や内容が変わることがあります。CVE.org・NVD に記録が公開されたら、内容をそれに置き換えます。
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
概要
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The projec...
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called
(The Hacker News: URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches)
出典: The Hacker News NVD