On October 21, patches were released for two dangerous vulnerabilities in the PHP core (CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell). They allow an attacker to execute arbitrary code on a server without authentication. PHP powers a huge share of websites on the internet, so a great deal is at risk. Exploitation is already being discussed publicly, and Cloudflare reports early attacks.
What we are doing:
We have updated PHP to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 on all servers. We have stepped up monitoring for suspicious activity.
What we ask you to do:
Report to us immediately if you notice:
.php files in upload, cache or tmp directories);Do not delete suspicious files or logs until our support team contacts you. They are needed to understand what happened.
How to reach us: https://lmd.systems/contact.php, we will reply as a priority.
It is better to report a false alarm than to miss a compromise.
Thank you for helping us keep protection at the right level.
