Advertise
PHP Flags Third Unpatched Flaw As Attacks On PHP2Shell Bugs Reach Millions
Writer by choice, CryptoCurrency Writer, and Researcher by chance. Currently, focusing on financial news and analysis, as well as cryptocurrency news and data. One may not call me a crypto “Enthusiast” but trust me I'm getting there.
PHP has disclosed a new server vulnerability, CVE-2026-115560, only two days after rushing out emergency patches for two critical PHP2Shell flaws. The latest bug can allow attackers to take over web servers, but only on sites running a rare combination of PHP session settings. No attacks using the new flaw have been detected so far. PHP said it does not see the issue as a likely target and will fix it in its next scheduled update instead of issuing an emergency release. Until then, administrators of affected sites should switch off the session upload progress feature. Meanwhile, Cloudflare reported that attempts to exploit the earlier PHP2Shell vulnerabilities have climbed into the millions. Earlier this week, SlowMist urged crypto exchanges and wallet providers to patch.
Was this writing helpful?
Trust with CoinPedia:
CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.
Investment Disclaimer:
All opinions and insights shared represent the author's own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.
Sponsored and Advertisements:
Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.
