Medius incident
Medius Security Advisory: PHP2Shell Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
Ongoing since 09:25 AM UTC.
Dear Customer, Medius is aware of the recently disclosed critical PHP vulnerabilities, collectively known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Following a thorough security assessment, we confirm that Medius products are not affected by these vulnerabilities, as PHP is not used in our product technology stack. As a result, no remediation measures are required for Medius products, and no action is needed from our customers in relation to their use of Medius services. Medius remains committed to maintaining the security of our products and services through continuous vulnerability monitoring and proactive risk management. Should you have any additional questions, please contact your Medius representative.
Update timeline
- monitoring Oct 22, 2026, 09:25 AM UTC
Dear Customer, Medius is aware of the recently disclosed critical PHP vulnerabilities, collectively known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Following a thorough security assessment, we confirm that Medius products are not affected by these vulnerabilities, as PHP is not used in our product technology stack. As a result, no remediation measures are required for Medius products, and no action is needed from our customers in relation to their use of Medius services. Medius remains committed to maintaining the security of our products and services through continuous vulnerability monitoring and proactive risk management. Should you have any additional questions, please contact your Medius representative.
Your product runs on more than Medius
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services