PHP2Shell Vulnerability (CVE-2026-109618 / CVE-2026-109619)
BusinessOptix Not Affected — 21 October 2026
Status: Not affected · Last updated: 21 October 2026
On 21 October 2026 the PHP project released emergency patches for two critical security flaws known as “PHP2Shell”. The flaws (CVE-2026-109618 and CVE-2026-109619) affect the PHP runtime, which is used by a large share of web applications and content management systems. On a vulnerable server, an attacker could run code without logging in.
Is BusinessOptix affected?
No. The BusinessOptix platform does not use PHP, so it is not exposed to these vulnerabilities. No action is needed from customers, and the BusinessOptix service is running normally.
What we’re doing
Our team is following the industry guidance as it develops. We’ll update this article if anything changes.
More information
If you have questions, please contact BusinessOptix Support.