Knowledgebase
Is JAM Software affected by the critical PHP vulnerabilities?
Question / Problem
Is JAM Software affected by the critical PHP vulnerabilities disclosed on October 21, 2026?
Answer / Solution
No. On October 21, 2026, the PHP project disclosed two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619, also known as "PHP2Shell") that could potentially allow attackers to execute malicious code on web servers.
We updated all affected systems immediately after the security updates were released. In addition, we conducted a targeted review of our systems for possible signs of attack. This review found no indication of unauthorized access or compromise.
Independently of this incident, we always keep our systems up to date and review them regularly so that we can respond quickly to new threats.
Our products, such as TreeSize, SpaceObServer (Web Access), UltraSearch, ShellBrowser and SEPA-Transfer, are not affected.
Need further help getting started?
You did not find what you were looking for? Please contact us so we can provide an answer to your question.
Contact Form