CVE-2026-115560

{
  "etk_id": "ETK-2026-2543",
  "cve_id": "CVE-2026-115560",
  "display_id": "CVE-2026-115560",
  "ghsa_id": null,
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Remote code execution vulnerability in PHP",
  "summary": "PHP deployments may be affected by a remote code execution vulnerability. An attacker may be able to execute code remotely where the vulnerable conditions are present, but the supplied evidence does not specify affected versions or the required configuration.",
  "mitigation": "Apply the configuration hardening recommended by the PHP security team and MyCERT. Monitor upstream PHP advisories and update promptly when a patched release is published.",
  "vendor": null,
  "product": "PHP",
  "affected": [],
  "cwes": null,
  "cvss_score": 9,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 10.369436216666667,
  "t0_at": null,
  "signals": {
    "check": {
      "at": "2026-10-24T14:02:33.982238+00:00",
      "days": -0.2649349291435185,
      "is_lower_bound": true,
      "measured_at": "2026-10-24T20:24:04.396885+00:00",
      "url": null
    },
    "public_poc": {
      "at": "2026-10-21T12:39:06+00:00",
      "days": -3.322897686527778,
      "is_lower_bound": true,
      "measured_at": "2026-10-24T20:24:04.396885+00:00",
      "url": "https://github.com/murrez/php2shell"
    },
    "trigger_signal": {
      "at": "2026-10-23T15:38:05+00:00",
      "days": -1.1986037050462963,
      "is_lower_bound": true,
      "measured_at": "2026-10-24T20:24:04.396885+00:00",
      "url": "https://www.bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/"
    }
  }
}