Technical Advisory: PHP2Shell Vulnerabilities

PHP2Shell Vulnerabilities (10/28/2026)

We have completed an assessment of the October 2026 critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (collectively known as PHP2Shell).

Based on our assessment, we verified that none of the following products are affected by these vulnerabilities because they do not use PHP. Therefore, no customer action is required regarding these PHP vulnerabilities.

Specifically evaluated products include:

  • All Raritan KVM & Serial products and accessories
  • All Raritan rack power distribution and rack management products
  • All Legrand sensors, door locks, and other accessories
  • All Legrand Open Compute Power System products

 

We continue to monitor developments related to these vulnerabilities as part of our ongoing cybersecurity and product security processes. Should any relevant information arise, we will communicate updates as appropriate.

 

Submit a Support Ticket

Our tech support team is here to help you with any product-related issue, including bugs and security vulnerabilities you may be experiencing. Please submit a ticket below.

Contact Tech Support