Information in regards to newly discovered PHP vulnerability CVE-2026-115560 (Oct 23, 2026)

Incident Report for Kinsta

Resolved

We can confirm that the mitigations have been successful and no compromises have occurred as a result of this.

If you have any other questions, please contact our support team at support@kinsta.com.

Posted Oct 27, 2026 - 14:06 UTC

Investigating

There were reports of a new vulnerability CVE-2026-115560, after the previous two were patched on October 22 on our platform. We already have mitigations against this, so there shouldn't be any incidents related to this. We'll post updates if there are any news.

Posted Oct 23, 2026 - 13:19 UTC