Current ThreatQ Version Filter
Product Security Advisory: PHP2Shell
| Advisory Item | Details |
|---|---|
| Advisory Publication Date | 2026-10-22 |
| Last Updated | 2026-10-22 4:00 PM EST |
| Status | In Progress |
| Next Planned Update | 2026-10-22 8:00 PM EST |
| Update Details | Summaries of advisory updates will be listed here when available. |
| Customer Deployment Type | On-Prem and ThreatQ Hosted deployments |
| ThreatQ Platform Versions Affected | ThreatQ v5x and v6x instances |
| Details | We are addressing two critical known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), in the PHP runtime used by the ThreatQ API. Based on our current assessment, these vulnerabilities affect ThreatQ v5 and v6 deployments, including on-premises and ThreatQ Hosted environments. |
| Resolution | Securonix is applying interim mitigations and preparing a ThreatQ platform update. As of the date of this advisory, we have not identified evidence of successful exploitation in ThreatQ environments. We continue to monitor and review the situation.
ThreatQ Hosted: We are applying and validating protective measures across hosted environments. No action is required from hosted customers. On-premises ThreatQ: We are preparing version-specific mitigation steps and we will publish them in the ThreatQ Help Center under this advisory. If you need guidance before it is published, please contact Securonix Support. Interim mitigations help reduce exposure but do not fully remediate the vulnerabilities. The planned ThreatQ v6.21.1 release will include PHP runtime updates addressing both CVEs. We will notify customers when the update is available and provide upgrade instructions. Please contact Securonix Support if you need assistance. |