PHP Vulnerability Responses by Company

ITSense

Global hosting
Aliases / services
ITSense / ITsense SAS / 794740670 / itsense.fr
Official website
https://itsense.fr/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Managed servers and PHP on older operating systems

Response status
Patches deployed to managed servers
Response information checked
2026-10-27 Rechecked: 2026-10-27

Reports rebuilding patched packages from Ondřej Surý's sources and deploying them across managed servers, including older PHP on Ubuntu 18.04, Ubuntu 20.04 and Debian 10.

Scope: The October 23, 18:15 update addresses the separate CVE-2026-115560: keep session.upload_progress.enabled=0 until the next fix, including on patched versions, and restart all PHP processes. This is distinct from its rebuilt fixes for the original two CVEs.

What users should do

Confirm deployment for your managed environment. Ask about patches for older systems and plan migration to supported platforms.

Official service URL

Source URLs

  1. ITSense: PHP responsehttps://www.itsense.fr/blog/failles-php-cve-2026-109618-109619/Response evidence
Related official sources
  1. ITSense: PHP responseOfficial notice
  2. ITSense: Operator informationOfficial information directory

Comments