Following a full assessment by our R&D and security teams, PROTEI has determined that its products and solutions are not affected by the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0: 9.2).
Vulnerability overview
PHP is a third-party, open-source programming language widely used to build websites and web applications. On October 21, 2026, the PHP project released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, together known as “PHP2Shell.”Impact assessment
No PROTEI product, platform, software application or management interface deployed in customer networks uses PHP.No action is required from PROTEI customers or partners regarding these vulnerabilities.
Our commitment to security
Security is built into every PROTEI platform. We continuously monitor new vulnerabilities and will share updates if new information becomes available.
For any questions, please contact our 24/7 technical support team at helpdesk@protei.me, through our helpdesk at helpdesk.protei.me, or by phone at +962 789 13 0000.