Overview
As part of our ongoing commitment to platform security and reliability, Gevme has successfully deployed security updates to address two recently disclosed PHP vulnerabilities, collectively known as PHP2Shell.
The security updates were deployed. Post-deployment verification confirmed that the Gevme platform is operating normally.
Vulnerabilities Addressed
The security update addresses the following critical vulnerabilities affecting PHP, a technology used by parts of the Gevme platform.
| Vulnerability | Description |
|---|---|
| CVE-2026-109618 | Remote Code Execution via Memory Exhaustion |
| CVE-2026-109619 | Remote Code Execution via Fatal Errors |
Both vulnerabilities have been addressed through the latest security updates.
Security Measures and Deployment
Before deploying the updates to production, our technical team conducted testing in the development environment to verify compatibility and minimise potential impact on platform functionality and stability.
Throughout the process, Gevme remained protected by our Imperva Web Application Firewall (WAF), providing an additional layer of security against known exploitation methods associated with these vulnerabilities.
Following deployment, the technical team completed verification checks and confirmed that the platform continues to operate normally.
What does this mean for you?
The security updates have been successfully completed with no action required from Gevme users.
- Security updates completed: Both identified vulnerabilities have been addressed.
- Continued protection: Our existing security measures, including Imperva WAF, remain active.
- Platform stability: The updates have been successfully deployed and verified.
- No action required: You can continue using Gevme as usual.
Our Commitment to Security
At Gevme, protecting our customers' data and maintaining a secure, reliable platform remain key priorities.
We continuously monitor security developments and proactively implement necessary updates to safeguard the platform against emerging threats.
Reference
For additional technical information about these vulnerabilities, please refer to the official security advisory:
Imperva Security Advisory – PHP2Shell