PHP2Shell security update
We are sharing this update to provide customers and partners with clarity on RelyComply’s response to the recently disclosed PHP2Shell security vulnerabilities.
PHP2Shell refers to two vulnerabilities—CVE-2026-109618 and CVE-2026-109619—in PHP, software commonly used to run websites and web applications. The vulnerabilities affect how PHP handles web requests. If successfully exploited, they could allow an attacker to run unauthorised code on a vulnerable server, potentially accessing information available to it.
RelyComply applied the relevant security patches on 21 October 2026, the same day they were released. RelyComply confirms that it was not impacted by these vulnerabilities.
