There is no detail available about the vulnerability CVE-2026-115560 which could lead to remote code execution. The PHP team will publish a full advisory with the next release.
https://github.com/Pr0fEs0r-X/PHP-CVE-2026-115560-Cheker-v-1.0
https://github.com/renzi25031469/CVE-2026-115560
https://github.com/pkconcept/php-cve-fix
https://cert.europa.eu/publications/security-advisories/2026-018