AI translation. Check versions, conditions and actions against the Japanese original and primary sources.
DAILY RECORD · 2026-10-23
10/23Subsequent PHP issues, exploited products, and corrected assessments.
Updates to scores, advisories, and attack observations that publication-date filtering alone misses.
Review as of 10/26 10:27 JST. Exact JST dates remain unconfirmed for items whose original sources provide only dates.
Information and interim mitigation · 19:12 JST (UTC 10:12).
Subsequent PHP CVE-2026-115560
PHP provides guidance on a follow-up issue involving specific session-processing configurations. Installing the 10/21 fixed versions alone does not establish that this separate issue is also fixed.
What to check Apply session.upload_progress.enabled=0 and check the actual settings of every worker. Follow official distribution information for a permanent fixed release.
Reassessment and investigation-result updates · NVD reassessment 06:17 JST; other originals dated 10/23
Score and Japanese API updates
Even if one PHP NVD rating changes, the fixed versions remain the same. Read JPCERT updates, including added Japanese Web/API examples, rather than relying on the initial report.
What to check Do not rely only on NVD scores or new publications; also check changes from developers and domestic alerts.