# Remediation for PHP2Shell Exploit

**URL:** <https://community.wowza.com/t/remediation-for-php2shell-exploit/102865>\
**Category:** Community\
**Tags:** security\
**Created:** [October 22, 2026, 9:09pm UTC](https://community.wowza.com/t/remediation-for-php2shell-exploit/102865 "2026-10-22T21:09:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michelle\_B](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/michelle_b/32/394_2.png) [@Michelle\_B](https://community.wowza.com/u/Michelle_B)\
**Post date:** [October 22, 2026, 9:09pm UTC](https://community.wowza.com/t/remediation-for-php2shell-exploit/102865/1 "2026-10-22T21:09:01Z")

</div>

On October 21, 2026, the PHP project released fixes for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Wowza reviewed its products and services the same day.

The products customers rely on to stream and deliver mission-critical video, including Wowza Streaming Engine and Wowza Streaming Engine Manager, do not use PHP and were not affected. A small number of auxiliary services, separate from these products, were updated to the fixed PHP release on October 21.

No action is required from customers.

Best regards,  
Wowza Information Security