Issue Description
On October 21, 2026, security vulnerabilities in the PHP programming language were published: PHP2Shell, CVE‑2026‑109618, and CVE‑2026‑109619 have been rated with the highest criticality and affect numerous web applications worldwide.
genua GmbH products are not affected, as no PHP is used. No further action is necessary.
Sources
- https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2026/2026-297981-1032.html
- https://www.cve.org/CVERecord?id=CVE-2026-109618
- https://www.cve.org/CVERecord?id=CVE-2026-109619