SECURITY ADVISORY · CVE-2026-109618 | CVE-2026-109619
Critical PHP Security Update: Is your website affected?
Two critical vulnerabilities in PHP were disclosed on 21 October, and fixes are available now. Our team will check whether your websites and web apps are affected, help you fix anything that needs attention and make sure you’re secure afterwards.
How we can support you?
How we can support you?
How we can support you?
1. Check: is PHP in use, and are you affected?
We’ll review your websites and web applications to confirm where PHP is running and whether it’s an affected version. This check is free and comes with no obligation.
2. Remediate: fix what needs fixing
If you’re affected, we’ll work alongside your IT team, developers or hosting provider to apply the updates. Where an update isn’t possible yet, we’ll help you put interim protections in place.
3. Secure: confirm you’re protected
We’ll verify that the fixes are working and review your systems for signs of unusual activity since 17 October. We’ll also recommend practical steps to keep you protected from here.
What is the PHP2Shell Vulnerability?
On 21 October, the PHP project released fixes for two critical security flaws in PHP’s core engine, known as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619). PHP is the technology behind many websites and web applications, including WordPress, Drupal, Joomla and Magento. In certain conditions, the flaws could allow an attacker to run commands on a web server or access data held in its memory, without needing to log in. The NCSC has rated the issue as critical.
69%
of websites rely on PHP
24hr
response support from our team
Why does this PHP Exploit matter?
Why does this PHP Exploit matter?
Why does this PHP Exploit matter?
The vulnerabilities are in PHP itself rather than in your website’s code, so a well-built site can still be exposed if PHP hasn’t been updated. Attempts to exploit the flaws have been reported since 17 October, which is why the NCSC recommends acting promptly. The fixes are well understood, and for most organisations this is a manageable task: find where PHP runs, update it and check for anything unusual.
How we help
How we help
How we help
You don’t need to work this out alone. Our cyber security team will:
confirm your exposure, starting with your internet-facing websites and applications
work with your team or provider to apply updates or interim mitigations
check for signs of compromise from 17 October onwards
give you a clear summary of where you stand and anything else we recommend
There’s no hard sell. If you’re already covered, we’ll tell you.
You don’t need to work this out alone. Our cyber security team will:
confirm your exposure, starting with your internet-facing websites and applications
work with your team or provider to apply updates or interim mitigations
check for signs of compromise from 17 October onwards
give you a clear summary of where you stand and anything else we recommend
There’s no hard sell. If you’re already covered, we’ll tell you.
Why teams love us
From robust threat defence to dependable regulatory assurance, our cyber-security service helps organisations stay resilient, safeguard their data, and concentrate on what truly drives their success.
We’ve always been very impressed with the cyber security services WorkNest provide us. Their professional approach, knowledge and flexibility have ensured they have become a key trusted partner in our supply chain.
Paymentsense
Founder
WorkNest Secure delivered a highly professional and thorough incident response service. Their team’s technical knowledge, attention to detail, and clear communication throughout the process made a complex area easy to navigate. The quality of the analysis and final reporting gave us real assurance and added value to our internal security efforts, minimising the impact to the business.
Shoezone
Head of IT
WorkNest Secure perform Web Application and Infrastructure Penetration Testing for Pharmacy2U. They are always professional to engage with, provide an excellent level of service, and the addition of GuardNest makes receiving and interrogating the results of the service very easy indeed.
We look forward to working with them in the future and trust the work they deliver.
Pharmacy2U
Founder
