Current PHP Vulnerabilities (php2shell): Scompler Is Not Affected

On October 21, 2026, warnings were issued regarding two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619), also known as “php2shell.” Scompler is not affected by these vulnerabilities.

Why Scompler Is Not Affected

Scompler does not use PHP. This also applies to the platform and hosting components that we operate for you.

What This Means for You

You do not need to take any action. No update is required, and no rollout is planned.

We’re keeping an eye on the situation

Our security team is closely monitoring further developments. If you have any questions, you can reach out to your Customer Success Manager or contact Support at any time. If necessary, we’ll also involve our CISO directly.