RelyComply Says it Patched PHP2Shell Vulnerabilities

In Short

RelyComply has published a security update about PHP2Shell, a set of PHP vulnerabilities.

The company says it applied the relevant patches on 21 October 2026, the same day they were released.

RelyComply also says it was not impacted.

What Happened

RelyComply said it is sharing an update to give customers and partners clarity on its response to recently disclosed PHP2Shell security vulnerabilities.

PHP2Shell refers to two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, in PHP. PHP is software commonly used to run websites and web applications.

RelyComply said the vulnerabilities affect how PHP handles web requests. If exploited, they could allow an attacker to run unauthorised code on a vulnerable server, potentially accessing information available to it.

The company said it applied the relevant security patches on 21 October 2026, the same day they were released. RelyComply also confirmed that it was not impacted by these vulnerabilities.

Why It Matters

Security patches are software fixes that close known weaknesses. Applying them quickly can reduce the window where attackers might try to exploit a flaw.

For customers and partners, RelyComply’s statement that it patched on release day and was not impacted provides a clear status update on exposure to PHP2Shell-related risk.