The post PHP Flags Third Unpatched Flaw As Attacks On PHP2Shell Bugs Reach Millions appeared first on Coinpedia Fintech News
PHP has disclosed a new server vulnerability, CVE-2026-115560, only two days after rushing out emergency patches for two critical PHP2Shell flaws. The latest bug can allow attackers to take over web servers, but only on sites running a rare combination of PHP session settings. No attacks using the new flaw have been detected so far. …