Leaked PHP Vulnerabilities – PHP2Shell (CVE-2026-109618 & CVE-2026-109619)

Update from October 21, 2026

The Dynatrace team has finished the analysis of the recently published news about the leaked critical PHP vulnerabilities. Dynatrace software is not impacted by these vulnerabilities.

How to use Dynatrace to detect PHP2Shell?

Read the details on the recently published blog post – CVE-2026-109618 & CVE-2026-109619: PHP2Shell Critical Vulnerability – what it is and what to do

Get article updates or report security vulnerabilities

Dynatrace takes a proactive approach in communicating security vulnerability information to customers. Learn more about Dynatrace security and our security policy. To report a security issue, email security@dynatrace.com.

RSS feed Report issue