Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

ELS for Grafana

ELS for Grafana: What Grafana...

Key Takeaways Dependencies multiply the end-of-life (EOL) risk surface, as Grafana’s Go backend, TypeScript/React frontend, and bundled libraries add vulnerability exposure that stops being patched once Grafana reaches EOL. Rushed...

TuxCare Endless Lifecycle Support Now...

PALO ALTO, Calif. – March 17, 2026 – TuxCare, a global innovator in securing open source, today announced that its Endless Lifecycle Support (ELS) for OSS now supports Grafana, extending...