字号·· | 护眼
thenextweb

PHP警告存在第三个PHP2Shell漏洞,但不会仓促发布修复PHP warns of a third PHP2Shell flaw but won’t rush out a fix

点「原文对照」整页切到原文,或双击某段只看那段的原文。

图片来源:Ben Griffiths,来自UnsplashCredit: Ben Griffiths on Unsplash

PHP警告称,存在第三个可让攻击者在网络服务器上运行代码的漏洞,此时距其为PHP2Shell漏洞发布紧急修复仅过去两天。这一次,它不会仓促推出修复。

PHP has warned of a third flaw that could let an attacker run code on a web server, two days after its emergency fixes for the PHP2Shell bugs. This time it will not rush out a fix.

在10月23日发布的一份简短公告中,PHP表示这个新漏洞CVE-2026-115560需要一种不寻常的设置组合,并且……

In a short advisory on 23 October, PHP said the new bug, CVE-2026-115560, needs an unusual mix of settings and…

阅读媒体原文 ↗