PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619): iplicit not affected

Posted about 6 hours ago by Gabrielle Day

  • Pinned Topic
  • Topic is Locked
Gabrielle Day
Gabrielle Day Admin

On 21 October 2026, critical security vulnerabilities in the PHP programming language were made public. Known as “PHP2Shell”, they are tracked as CVE-2026-109618 and CVE-2026-109619. The UK National Cyber Security Centre (NCSC) has issued guidance asking organisations to find and update any systems that use PHP.

We have completed an assessment. The iplicit platform is not built on PHP, so the platform and your data are not affected by these vulnerabilities. We have also reviewed the sub-processors that support our service. Each has confirmed that their services handling iplicit customer data are not affected.

You don’t need to do anything, and the iplicit service is running normally.

We take the security of your data seriously and follow ISO 27001 practices. We will keep monitoring NCSC guidance and update this notice if anything changes. If you have questions, please contact our Support team in the usual way.

0 Votes


0 Comments