{"id":"ECHO-525e-a490-c956","modified":"2026-10-24T01:45:03.118066254Z","published":"2026-10-23T22:23:46.370Z","upstream":["CVE-2026-115560"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-115560"},{"type":"WEB","url":"https://www.wiz.io/blog/php2shell-php-rce"}],"affected":[{"package":{"name":"php-8.1","ecosystem":"Echo","purl":"pkg:deb/echo/php-8.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-525e-a490-c956.json"}},{"package":{"name":"php-8.2","ecosystem":"Echo","purl":"pkg:deb/echo/php-8.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-525e-a490-c956.json"}},{"package":{"name":"php-8.4","ecosystem":"Echo","purl":"pkg:deb/echo/php-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-525e-a490-c956.json"}},{"package":{"name":"php-8.5","ecosystem":"Echo","purl":"pkg:deb/echo/php-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-525e-a490-c956.json"}}],"schema_version":"1.9.0"}