{"is":"issue","title":"Scheduled security update — protection against PHP2Shell (CVE-2026-109619)","body":"\u003cp\u003eDear Customer, Dear Partner,\u003c/p\u003e\n\u003cp\u003eScheduled: night of 21 to 22 October 2026, between 22:00 and 06:00 CEST.\u003c/p\u003e\n\u003cp\u003eWe are deploying a security update to all Cloud Protector applications to protect them against the PHP2Shell attack (CVE-2026-109619). This attack abuses the PHP session upload progress mechanism to gain remote code execution on vulnerable PHP backends.\u003c/p\u003e\n\u003cp\u003eImpact: no action is required on your side and no service interruption is expected. The update is applied progressively to each application and takes effect within a minute of being applied.\u003c/p\u003e\n","createdAt":"2026-10-21 22:00:00 +0200 +0200","lastMod":"2026-10-21 23:13:20 +0200 +0200","permalink":"https://status.ubika.io/issues/2026-10-21-fix_cve_php2shell/","severity":"notice","resolved":false,"informational":true,"resolvedAt":"<no value>","affected":["Runtime"],"filename":"2026-10-21-fix_cve_php2shell.md"}