Author Topic: Temporary fix for CVE-2026-115560  (Read 71 times)

0 Members and 2 Guests are viewing this topic.

Offline
*****
Temporary fix for CVE-2026-115560
« on: October 24, 2026, 08:09:13 PM »
We have published a temporary fix for Temporary fix for CVE-2026-115560 that affect's all PHP versions.

The knowledge Base article can be found at:
https://starburst.help/security/temporary-fix-for-cve-2026-115560/

Full Article can be found at:
https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html

Offline
*****
Re: Temporary fix for CVE-2026-115560
« Reply #1 on: October 24, 2026, 08:49:09 PM »
TL;DR: In every php.ini, set:
Code: [Select]
session.upload_progress.enabled = Off

Offline
*****
Re: Temporary fix for CVE-2026-115560
« Reply #2 on: October 24, 2026, 08:50:57 PM »
TL;DR: In every php.ini, set:
Code: [Select]
session.upload_progress.enabled = Off

That work's also.
After you un-comment the line.