PHP PHP2Shell

Date: 2026-10-21

Description:

On October 21, 2026, the PHP project disclosed two critical remote code execution vulnerabilities in the PHP core interpreter, CVE-2026-109618 and CVE-2026-109619, also known as “PHP2Shell.”

SureView products do not use PHP so these vulnerabilities do not affect SureView software or the services we host for customers, and you do not need to take any action on your SureView deployment.

We encourage you to check all other software products you use to ensure they are not at risk, and if you have additional questions after reviewing this notice please contact Support