Control Web Panel

WebPanel => PHP => Topic started by: Starburst on October 24, 2026, 08:09:13 PM

Title: Temporary fix for CVE-2026-115560
Post by: Starburst on October 24, 2026, 08:09:13 PM

We have published a temporary fix for Temporary fix for CVE-2026-115560 that affect's all PHP versions.

The knowledge Base article can be found at:
https://starburst.help/security/temporary-fix-for-cve-2026-115560/ (https://starburst.help/security/temporary-fix-for-cve-2026-115560/)

Full Article can be found at:
https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html (https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html)

Title: Re: Temporary fix for CVE-2026-115560
Post by: overseer on October 24, 2026, 08:49:09 PM

TL;DR: In every php.ini, set:

Code: [Select]

session.upload_progress.enabled = Off

Title: Re: Temporary fix for CVE-2026-115560
Post by: Starburst on October 24, 2026, 08:50:57 PM

Quote from: overseer on October 24, 2026, 08:49:09 PM

TL;DR: In every php.ini, set:

Code: [Select]

session.upload_progress.enabled = Off

That work's also.
After you un-comment the line.