Laravel

PHP Session Upload Progress Advisory (CVE-2026-115560): Keep It Disabled for Now

The PHP security team recommends keeping session.upload_progress.enabled=0 until the next regular release to close an unlikely RCE path (CVE-2026-115560). Here is who is actually affected and how to check in two minutes.

PHP2Shell: Critical PHP Vulnerabilities (CVE-2026-109618/109619) and How to Fix Them

Two critical PHP flaws let attackers run code on web servers without logging in, and public exploits are already online. Here is who is affected, which versions fix it and how to check and update your server today.