PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Minor · Started Oct 21, 2026 · 11:06 AM

Duration

21h 26m
Severity

Minor
Detection lead

—
User reports

—

Summary

PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP. We have completed our review of our broader environments and have addressed any other potential exposures. No further updates are expected.

Started

Oct 21, 2026 · 11:06 AM
Resolved

Oct 22, 2026 · 8:33 AM
Duration

21h 26m
Severity

None

Event timeline

How this incident unfolded

◆

Identified
Oct 21 · 11:06 AM Auvik Networks

We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP We are reviewing our broader environments for potential exposure and will share updates as more information becomes available.
✓

Resolved
Oct 22 · 8:33 AM Auvik Networks

We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP. We have completed our review of our broader environments and have addressed any other potential exposures. No further updates are expected.