Update your PHP (if you can), folks. That is, install PHP 8.5.12 to fix critical vulnerabilities CVE-2026-109618 and CVE-2026-109619.
https://www.php.net/archive/2026.php#2026-10-21-5
Until updates are available on your platform, I hear that setting in php.ini
session.upload_progress.enabled = Off
session.use_only_cookies = On
can mitigate some attacks.
www.php.netPHP: News Archive - 2026PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.