About PHP2Shell Vulnerabilities | Cybersecurity Statement
VeEX has successfully performed an internal security audit, looking for any PHP implementation that may affect its web/cloud services. VeEX doesn’t rely on PHP for any of its critical services.
On October 21, 2026, upon receiving reports of PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, VeEX immediately launched an internal audit to assess any potential exposure or impact across its web, cloud, and software-as-a-service (SaaS) offerings. The audit covered public websites, the Knowledge Base, EZ-Remote™, VeExpress™, VeSION®, R-Server™, RealWORX™, OTT, RFTS systems, Fiberizer™, Test with Flow®, and NoApp® servers, among others.
Following the audit, it has been confirmed that VeEX doesn’t rely on PHP for any of its critical infrastructure or services, and we are not aware of any impact to our platforms or customers. However, we took the opportunity to evaluate the latest applicable security patches available to mitigate any other identified risks. Nonetheless, VeEX will continue to monitor PHP security situation and related cybersecurity issues closely.
-
NO Actions Required on our customers/users' side.