Summary

Deledao has reviewed the recently disclosed PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619.

Deledao products are not affected by these vulnerabilities.


Impact Assessment

The PHP2Shell vulnerabilities affect products that use the vulnerable PHP components.

After review by the Deledao Engineering Team, we can confirm that:

  • The affected PHP components are not present in Deledao products.
  • Therefore, CVE-2026-109618 and CVE-2026-109619 do not impact Deledao products.


Remediation

Because Deledao products are not affected:

  • No security patch is required.
  • No mitigations or configuration changes are required.
  • No customer action is required.