PHP Security Update - Everleap

We are aware of a recently reported PHP security issue. Our team is working on it now across all Everleap servers.

We’ll send an email with more details soon. You don’t need to do anything right now.

If you have questions, please open a support ticket and we’ll be glad to help.

Thanks,
The Everleap Team

 

A critical vulnerability in PHP, “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619) was disclosed on Oct 2oth.
The PHP project released security updates on October 21, and we have applied them across our servers.
We’ll be emailing customers with more details and recommendations.

Note that sites that don’t use PHP, such as ASP.NET-only sites, are not affected.

If you have questions in the meantime, please contact our support team.