Medius Security Advisory: PHP2Shell Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
Incident
Report for Medius
Subscribe to Updates
Monitoring
Dear Customer,
Medius is aware of the recently disclosed critical PHP vulnerabilities, collectively known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).
Following a thorough security assessment, we confirm that Medius products are not affected by these vulnerabilities, as PHP is not used in our product technology stack.
As a result, no remediation measures are required for Medius products, and no action is needed from our customers in relation to their use of Medius services.
Medius remains committed to maintaining the security of our products and services through continuous vulnerability monitoring and proactive risk management.
Should you have any additional questions, please contact your Medius representative.
Medius is aware of the recently disclosed critical PHP vulnerabilities, collectively known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).
Following a thorough security assessment, we confirm that Medius products are not affected by these vulnerabilities, as PHP is not used in our product technology stack.
As a result, no remediation measures are required for Medius products, and no action is needed from our customers in relation to their use of Medius services.
Medius remains committed to maintaining the security of our products and services through continuous vulnerability monitoring and proactive risk management.
Should you have any additional questions, please contact your Medius representative.