Information on the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell") – our systems are not affected
Last updateresolvedOct 22 · 12:54 UTC
Dear Customer, A security vulnerability in the PHP scripting language (identifier: [CVE number]) has recently been reported. As PHP is used in a wide range of web applications worldwide, we would like to proactively inform you about the situation on our side. As soon as the vulnerability became known, our IT team carefully reviewed all relevant systems and applications. We can confirm the following: • Our systems are not affected by this vulnerability. • At no time was there any risk to your data or our services. • No action is required on your part. The security of your data is our highest priority. We continuously monitor the security landscape, keep our systems up to date at all times, and will of course inform you should this assessment change. If you have any questions, please do not hesitate to contact us.
Reported by Computop Paygate GmbH on their status page.