Yembo is not affected by the PHP “php2shell” vulnerability (CVE-2026-109618)
Last updateresolvedOct 22 · 17:06 UTC
We’re aware of the critical PHP vulnerability known as “php2shell” (CVE-2026-109618), disclosed on October 20. Yembo applied the official PHP security patch across all of our services as soon as it was available on October 21. A follow-up scan of all of Yembo’s internet-facing systems confirmed that none are vulnerable; you can see the report here: https://yem.bo/php2shell No action is required from customers, and all Yembo services are running normally. If your security team has questions, contact us at security@yembo.ai.
Reported by Yembo on their status page.
