PHP shares mitigation for new unpatched RCE vulnerability

The PHP security team has shared a mitigation for a new remote code execution vulnerability, CVE-2026-115560. The vulnerability affects systems with non-default configurations and does not yet have a patch.