Critical php2shell Security Update Available in Seiden PHP+ Server
Last updated: 11:38pm ET, Oct. 21, 2026: A security update for CVE-2026-109618 and CVE-2026-109619 (known as php2shell) is now available in Seiden PHP+ Server for IBM i. All supported PHP versions, 8.2, 8.3, 8.4, and 8.5, plus end-of-life 7.4, 8.0, and 8.1, have the update available. We encourage everyone to apply it promptly. The update addresses two critical PHP vulnerabilities, each rated 9.2 out of 10 under the CVSS v4.0 scoring system. The PHP security team announced the planned release on October 20 and urged users to upgrade as soon as it became available. Preparing for these inevitable rapid fixes…
