COSMO CONSULT is actively responding to the recently disclosed critical security vulnerabilities in PHP, known as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619).
The vulnerabilities affect PHP installations that process web requests. If successfully exploited, attackers can remotely execute malicious code on affected systems. Security updates to address the vulnerabilities were released on October 21, 2026.
Our Response
Immediately after the vulnerabilities became known, our IT and security teams initiated a comprehensive review of our environment to identify potentially affected systems and assess their exposure.
As a precautionary measure, we temporarily took affected systems accessible from the Internet offline until they could be safely updated and verified.
This approach is in line with CISA’s recommendations, which urge organizations to apply available security updates immediately and to take PHP-based systems offline if an immediate update is not possible.
Affected systems are being updated and verified and will only be returned to regular operation once the necessary security updates have been successfully applied.
Current Security Status
Based on our investigations and monitoring measures to date, we have found no evidence of successful exploitation of these security vulnerabilities in the systems examined by COSMO CONSULT.
We continue to monitor developments and our environment for any potential signs related to these security vulnerabilities.
No action is required on the part of our customers
Should specific protective measures be necessary for individual customer environments or services, these will be implemented directly by the responsible COSMO CONSULT teams.
Customers who operate their own PHP-based systems should review the security advisories from their respective software or hosting providers and ensure that available security updates are installed. PHP systems accessible from the Internet should be prioritized, and systems should be taken offline if an immediate update is not possible.
Staying Vigilant Together: Our Recommendations for You
As with other high-profile cybersecurity incidents, we recommend that you be especially vigilant regarding suspicious emails or messages that refer, for example, to urgent security updates, PHP or website vulnerabilities, password changes, or requests to verify login credentials.
COSMO CONSULT is continuously monitoring developments related to PHP2Shell and will take additional measures as needed.
COSMO CONSULT Security Office
Contact our COSMOnaut
Lukas Wagner - Chief Information Security OfficerMore similar news articles
Found what you were looking for?
Start your intelligent search now