Statement on the PHP2Shell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
On 21 October 2026, the PHP Foundation released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. The flaws allow unauthenticated remote code execution on servers running PHP 5.4 or later and have been rated 9.2 out of 10 on the CVSS scale. Several websites worldwide have been taken offline as a precaution.
MyP11D.com is not affected. Our production systems, MyP11D.com and the P11D Organiser application, do not use PHP in any form, so it is not exposed to these vulnerabilities, and no action is required from our customers.
We are continuing to monitor developments and will update this statement if the position changes. If you have any questions, please contact our support team.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article