Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

FedRAMP vulnerability remediation timeline

The New FedRAMP Vulnerability Remediation...

Key Takeaways Under FedRAMP’s 2026 rules, recommended remediation timeframes run from 12 hours to 192 days, counted from the provider’s evaluation of the vulnerability. New applicants must follow FedRAMP’s 2026...