Security Advisory: PHP2Shell Vulnerability (CVE-2026-109618 and CVE-2026-109619)

Last Updated	23 Oct 2026

Peer Software has been monitoring the news around the recently discovered remote code execution vulnerabilities that involve the PHP framework (CVE-2026-109618 and CVE-2026-109619).

Based on the information currently available, these vulnerabilities do not affect any of our products. More details can be found below.

Product/Tool	Version(s)	Status	Description
Peer Global File Service	All	Not impacted	PeerGFS does not use PHP. There are some example PHP files that ship with the Apache ActiveMQ broker, but they are not used and can be safely removed.
PeerIQ	All	Not impacted	PeerIQ does not use PHP.
PeerSync	All	Not impacted	PeerSync does not use PHP.
File System Analyzer	All	Not impacted	File System Analyzer does not use PHP.
File Activity Analyzer	All	Not impacted	File Activity Analyzer does not use PHP.
Health Checker	All	Not impacted	Health Checker does not use PHP.
PeerLink (legacy)	All	Not impacted	PeerLink does not use PHP.
PeerLock (legacy)	All	Not impacted	PeerLock does not use PHP.

If you have additional questions, please contact our support team via Peer Service Desk.