PHP2Shell Vulnerability (CVE-2026-109618 & CVE-2026-109619)
Timeline · 1 update
- identified Oct 21, 2026, 01:36 PM UTC
We are aware of the current 'PHP2Shell' vulnerability. We are awaiting the release of the patch, expected today (Wednesday) or tomorrow (Thursday). When this is validated we will apply this automatically across our customer base. In the meantime we are also applying additional mitigations across our customer's servers. If you are a hosting customer you should reach out to your web developers as soon as possible to confirm that your application supports PHP version 8.2 or above.