The PHP Foundation(@ThePHPF):Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc

The PHP Foundation

@ThePHPF

We support, promote, and advance the PHP language. 💜🐘 #ThePHPFoundation# Donate at

Joined November 2021

0 Following 26.6K Followers

The PHP Foundation@ThePHPF

2026.10.23 10:36

Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php# #phpc#

2.8K

903

Forward to community

Most Popular Users