CVE-2026-109618 and CVE-2026-109619 - Php2Shell Critical Vulnerability - Incident Response

General Discussion Product Security
1

Vulnerability Advisories

Hi All,
Please find attached the Product Security Advisory for the critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619.
Ross Video assessment confirmed
Streamline Xchange 10.4.0
(and prior) as affected. The advisory includes the current mitigations and remediation guidance.

CVE-2026-109618-109619 Php2Shell Critical vulnerability - Vulnerability Incident Response Advisory.pdf (281 KB)