Skip to content
Genie Products
Account
Basket

PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Author:

Security Statement:


PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) 2026-10-26
Date: October 26, 2026

Summary
We are aware of the recently disclosed PHP-related vulnerabilities (CVE-2026-109618 and CVE-2026-109619),
collectively known as “PHP2Shell,” which have drawn widespread attention and inquiries.

We can confirm that all of our products—including both End-of-Life (EOL) and currently active product lines—are not affected by these
vulnerabilities, therefore, no action is necessary from our customers.

Technical Analysis
Our security team have conducted a comprehensive investigation. Our products are built on secure, PHP-free
technology stacks.


• Device Firmware: Our firmware is developed using C/C++ architectures.
• Cloud Platform Services: Our web-based services are built on a Java technology stack.


Consequently, because no PHP components are incorporated into our product architecture, there is no attack
surface and no exposure to these vulnerabilities. Your devices and system services remain secure.

Our Commitment
We prioritise product security and customer data privacy above all else. Our security team continues to actively
monitor industry security trends and will promptly evaluate and address any potential risks to ensure you receive
secure, reliable products and services.

Contact
If you have any questions or require further technical support regarding this statement, please contact our technical
support team.


Genie Technical Support Team