AccurioPro Flux not affected by PHP2Shell vulnerability

The recently identified PHP2Shell vulnerability does not affect AccurioPro Flux. PHP is not used in our software products.

News AccurioPro10/22/202612:11 óra

On 21 October 2026, the PHP project released security updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell. They let an attacker run code on a web server that runs PHP, without logging in.

AccurioPro Flux does not contain or use PHP. Flux Server and Flux Web run on Node.js. Before version 9.0, Flux Web ran on the Apache HTTP Server, also without PHP. AccurioPro Flux installations need no update and no configuration change.