PHP Vulnerability (CVE-2026-115560)

Incident Report for Seravo

Identified

PHP Foundation has announced yet another vulnerability in PHP interpreter, tracked as CVE-2026-115560, see announcement at https://www.php.net/archive/2026.php#2026-10-23-1 .

This vulnerability, unlike the previous one, will need special configuration to be exploited, so any real-world attack against our customers is unlikely using this vulnerability.

Seravo will mitigate and apply patches on behalf of all customers when patch is made available.

Posted Oct 23, 2026 - 11:39 UTC