October 22, 2026: SecureSafe is not affected by the “php2shell” vulnerabilities

On October 21, 2026, two critical security vulnerabilities affecting the widely used PHP technology were publicly disclosed under the identifiers CVE-2026-109618 and CVE-2026-109619, together known as “php2shell.” Immediately after disclosure, the SecureSafe security team reviewed whether any SecureSafe services or supporting systems could be exposed.

SecureSafe is not affected. None of the SecureSafe services rely on the affected technology, and a review of the supporting infrastructure, the public websites and relevant third-party providers identified no impact. SecureSafe users do not need to take any action, and all services remain available and continue to operate as normal.

The SecureSafe security team continues to monitor developments and the advisories of its technology providers, and this advisory will be updated should the assessment change.