New CRITICAL PHP vulnerability

[bigredfish]

No idea what I just read.
Something about broccoli but it sounds bad

 

[Mike]

@Mike - read above ^^^

We have already been patched before this thread was even made

 

[bigredfish]

We have already been patched before this thread was even made

Sorry, but when you first replied that it was on 8.1 and all is good, that doesn’t address the problem.

If it’s Since been patched that’s all you needed to say.

 

[bigredfish]

 

[bigredfish]

All way over my head. But it seems to be a good thread for those that understand this stuff


New RCE Vulnerability in PHP: CVE-2026-115560

PHP announced a new Remote Code Execution (RCE) vulnerability two days after the PHP2Shell patches.

 

[Mike]

Sorry, but when you first replied that it was on 8.1 and all is good, that doesn’t address the problem.

If it’s Since been patched that’s all you needed to say.

I said we are above 8.1, and later on said we have been patched.

IPCT is on the LATEST php that has these vulnerabilities patched. As soon as an update is released, our servers are patched. Is that clear enough for you?

 

[bigredfish]

Doesnt matter