A new security vulnerability discovered in PHP has prompted the release of an official security advisory. According to reports released on Friday, 6 Kartik 2083 BS, the security flaw could allow unauthorized individuals to execute code on affected web servers, potentially impacting a large portion of websites and digital systems worldwide that rely on the programming language. To mitigate potential risks, an interim configuration adjustment has been advised. Server administrators are instructed to modify their system settings to session.upload_progress.enabled=0. Reports indicate that this temporary measure should remain active until the next scheduled bug fix update is officially deployed to resolve the security flaw permanently. The advisory highlights ongoing security concerns across internet systems and web platforms. With digital infrastructure increasingly targeted by malicious actors, developers and administrators are urged to apply recommended configurations promptly to safeguard their networks against potential exploits and unauthorized server access.
TechnologyUpdated
PHP Issues Advisory Following Detection of New Security Vulnerability
The scripting language project advises disabling a specific session configuration setting until an official bug fix is released.
0:31
In short
- PHP released a security advisory regarding a new server vulnerability on Friday, 6 Kartik 2083 BS.
- The flaw could allow unauthorized individuals to run code on web servers running the software.
- Administrators are advised to set session.upload_progress.enabled to 0 until a bug fix is released.
From public sources and the WeNepal research team
https://wenepal.com/article/php-issues-advisory-following-detection-of-new-security-vulnerability-20261023

Comments
Comments are not open yet. We are building moderation first so the conversation stays safe. Use the contact form to reach the newsroom.
Contact