Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

ELS for OS and ELS for PHP

PHP 8.1 End of Life:...

key takeaways Each PHP release branch reaches end of life after its two years of active support plus two years of security support. Running PHP 8.1 after EOL increases risks,...

Common Security Advisory Framework (CSAF)...

TuxCare now provides Common Security Advisory Framework (CSAF) data as part of our security measures for Endless Lifecycle Support for OS and Endless Lifecycle Support for PHP. CSAF is a...