Seravo Status
PHP Vulnerability (CVE-2026-115560)

Started

Ongoing

—

Duration

13 days

IdentifiedVendor link

Update timeline

Identified

PHP Foundation has announced yet another vulnerability in PHP interpreter, tracked as CVE-2026-115560, see announcement at https://www.php.net/archive/2026.php#2026-10-23-1 . This vulnerability, unlike the previous one, will need special configuration to be exploited, so any real-world attack against our customers is unlikely using this vulnerability. Seravo will mitigate and apply patches on behalf of all customers when patch is made available.