PHP2Shell and its impact on Mixvoip
by Clemens KISTINGER
on Oct 26, 2026

PHP2Shell security update

Following the disclosure of PHP2Shell, the critical PHP vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619, we have completed the necessary remediation across our affected systems.
More details about PHP2Shell can be found for example on Wikipedia.

Understanding Security Vulnerabilities and CVE

Every brand and device might encounter security vulnerabilities at some point. There’s a vast and transparent security community that tracks, identifies, and records known vulnerabilities with a CVE (Common Vulnerabilities and Exposures). Vendors, like in this case the PHP Foundation, promptly address these vulnerabilities with updates.
You can verify the known vulnerabilities of PHP at this independent CVE details website.

Early notification and response

For these CVEs, we received advance notifications through several channels and treated the issue with the utmost seriousness. Our teams prepared the response, assessed our environment and took the necessary actions to address the vulnerabilities.
In addition to our web servers, all Mixvoip PBX systems were affected and have therefore been updated as part of this response.
Affected systems were updated wherever updates were immediately available. Where an immediate update was not possible, mitigation measures were put in place until the updates could be completed.

Remediation completed

All affected systems, including those initially protected by temporary mitigations, have now been updated to address these vulnerabilities. Remediation is complete across our web servers and all Mixvoip PBX systems.
Our systems are up to date and secured against the disclosed PHP2Shell vulnerabilities. We continue to monitor security advisories and maintain our regular security update processes.

Talk to an expert

Speak directly with our experts who are ready to provide insights and answers.
 

TLDR: PHP2Shell at Mixvoip

  • The article informs about the CVEs in PHP, called PHP2Shell, and addresses Mixvoip reaction to it directly
  • Mixvoip, using PHP in the Voxbi Cloud PBX solution, explains their position on these security issues
Updated on 2026-10-26
 

Latest articles

Gallery view