+11Should we be concerned about the recent critical PHP security vulnerabilities affecting IFS Cloud environments?
Has IFS provided any updates confirming whether these vulnerabilities affect IFS Cloud or on-premises environments, and whether any actions or patches are required?
Any official advisories or guidance from IFS would be appreciated.
+11IFS Engineering has confirmed that IFS Cloud Remote Infrastructure is not affected by CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), as the assessed remote deployment components do not install or run PHP. No patch or configuration change is required within this scope.
However, this confirmation does not cover separately installed PHP applications or third-party services in on-premises/customer-managed environments. These will need to be assessed separately if applicable.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
