Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026)

Resolved

None impact

Started

Lasted 96h 48m

View official incident ↗

Updates

  1. Resolved

    We can confirm that the mitigations have been successful and no compromises have occurred as a result of this. If you have any other questions, please contact our support team at support@kinsta.com.

  2. Investigating

    There were reports of a new vulnerability CVE-2026-115560, after the previous two were patched on October 22 on our platform. We already have mitigations against this, so there shouldn't be any incidents related to this. We'll post updates if there are any news.