Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

Log4Shell

Hidden Log4j Vulnerability Risk: The...

Remember December 2021? The collective panic when Log4Shell dropped and suddenly every engineering team on the planet was scrambling to figure out if they were running Log4j, where it was...