$ brief --date 2026-10-23 --edition morning --storyMorning brief, Oct 23

Follow-up to Oct 21: PHP adds mitigation guidance for another RCE vector

PHP recommends disabling session upload progress pending a regular-cycle fix for CVE-2026-115560, which requires an unusual configuration and runtime change.

PHP security update