CVE-2026-115560
CVE-2026-115560 key facts
- CISA KEV
- Not listed (catalogue checked )
- Highest advisory rating
- Medium
- Vendor advisories
- 1 from Fortinet
- Listed by VulniPulse
- Record changed
Ratings, versions and fixes are quoted from the vendor advisories that cover only CVE-2026-115560; each belongs to its advisory, not to every product listed. How records are collected and checked.
Vendor advisories for CVE-2026-115560
Fortinet
1 advisory- Advisory severityMedium5.3
Medium [CVE-2026-109618 +2] PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
FG-IR-26-186Source published Source updated
This bulletin covers 3 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
CVSSv3 Score: 5.3 CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory.CVE-2026-109619 PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized.CVE-2026-115560 PHP has published a security warning regarding an…
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
References
More Fortinet advisories
CVE-2026-98432Nov 2, 2026Linux kernel RCE CVE-2026-98432CVE-2026-105481Oct 26, 2026Node2Shell CVEsCVE-2026-23707Oct 13, 2026FortiAnalyzer Cloud SQL injectionCVE-2026-23706Oct 13, 2026FortiAnalyzer Cloud SQL injectionCVE-2026-23705Oct 13, 2026FortiAnalyzer Cloud SQL injectionCVE-2025-46773Oct 13, 2026FortiAnalyzer Cloud SQL injection
Get an email when Fortinet publishes the next one.
See Fortinet's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Fortinet CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
