Notices
PHP2Shell – 24 October 2026
CVE-2026-109618 and CVE-2026-109619
24 October 2026 · Docuvera
Docuvera has assessed the PHP vulnerabilities disclosed on 21 October 2026 and known as PHP2Shell. This notice confirms Docuvera’s position for the Docuvera SaaS product, and for the services and tools Docuvera uses to run the business.
The Docuvera SaaS product
Customer workloads on the Docuvera service are not exposed to CVE-2026-109618 or CVE-2026-109619. There has been no impact on the service.
Services and tools Docuvera uses
There is no evidence of exploitation, and no evidence of impact on Docuvera.
| SaaS product Not exposed to PHP2Shell. | Business services Security updates confirmed. | Exploitation No evidence of exploitation or impact. |
Further information
Current assurance material for Docuvera is published in the Docuvera Trust Center.
https://trust.docuvera.com/
Please direct any question about this notice to the Docuvera support contact already held on your account.