Tibus incident

PHP2Shell Vulnerability (CVE-2026-109618 & CVE-2026-109619)

Minor Resolved View vendor source →

Tibus experienced a minor incident on October 21, 2026, lasting 12m. The incident has been resolved; the full update timeline is below.

Started
Oct 21, 2026, 01:36 PM UTC
Resolved
Oct 21, 2026, 01:49 PM UTC
Duration
12m
Detected by Pingoru
Oct 21, 2026, 01:36 PM UTC

Update timeline

  1. identified Oct 21, 2026, 01:36 PM UTC

    We are aware of the current 'PHP2Shell' vulnerability. We are awaiting the release of the patch, expected today (Wednesday) or tomorrow (Thursday). When this is validated we will apply this automatically across our customer base. In the meantime we are also applying additional mitigations across our customer's servers. If you are a hosting customer you should reach out to your web developers as soon as possible to confirm that your application supports PHP version 8.2 or above.