PHP has published a new advisory for CVE-2026-115560, affecting session upload progress.
This feature remains disabled across our fleet as part of earlier mitigations. We are awaiting patches from our software vendors and will apply them as they become available.