Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026)

Incident Report for Kinsta

Investigating

There were reports of a new vulnerability CVE-2026-115560, after the previous two were patched on October 22 on our platform. We already have mitigations against this, so there shouldn't be any incidents related to this. We'll post updates if there are any news.

Posted Oct 23, 2026 - 13:19 UTC