CVE-2026-115560

Name of the Vulnerable Software and Affected Versions PHP versions prior to 8.2.35 PHP versions prior to 8.3.36 PHP versions prior to 8.4.27 PHP versions prior to 8.5.12

Description An issue exists that could allow remote code execution. Additionally, a separate problem involving an unusual combination of session settings and application behavior was identified. Amazon Threat Intelligence reported an exploitation attempt against its monitoring infrastructure on October 17.

Recommendations Update to PHP version 8.2.35, 8.3.36, 8.4.27, or 8.5.12. As a temporary mitigation, disable session upload progress where applicable. Isolate exposed applications when patching is not feasible.