---
title: "Security Update: Nevvon's Response to PHP2Shell"
description: PHP2Shell
---

[Skip to content](https://help.nevvon.com/knowledge/security-update-nevvons-response-to-php2shell#main-content)

English

Show submenu for translations

![Logo Portrait Tagline-2](https://help.nevvon.com/hs-fs/hubfs/Logo%20Portrait%20Tagline-2.png?width=400&height=106&name=Logo%20Portrait%20Tagline-2.png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://help.nevvon.com/knowledge?hsLang=en)
2. [Help for Managers](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en)
3. [System Updates](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#system-updates)

# Security Update: Nevvon's Response to PHP2Shell

October 2026

### What Happened

On October 21, 2026, two critical security vulnerabilities affecting PHP, a widely used technology for web applications, were publicly disclosed.

Known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), these vulnerabilities could potentially allow unauthorized execution of code on affected servers.

### How did Nevvon respond

Nevvon responded promptly after receiving an alert from our security monitoring partner, Aikido Security:

- October 21, 12:40 AM EDT: Aikido Security alerted our engineering team. We assessed the affected systems, implemented initial protective measures, and prepared updates while awaiting a security release from a third-party application runtime provider.
- October 22, 10:38 AM EDT: We integrated the updated runtime into our testing environment.
- October 22, 1:29 PM EDT: The fix was released to production.

### No security incident recorded

No actual security incident was recorded in connection with these vulnerabilities. Our response was precautionary and focused on addressing the identified risk promptly.

### Our commitment to security

Protecting customer information and maintaining a secure learning environment remain priorities at Nevvon. We continuously monitor emerging threats, work with specialized security partners, and prioritize timely remediation of critical vulnerabilities.

No action is required from Nevvon customers in relation to this update.

- [Help for Caregivers](https://help.nevvon.com/knowledge/help-for-caregivers?hsLang=en#main-content)

    - [Getting Started](https://help.nevvon.com/knowledge/help-for-caregivers?hsLang=en#getting-started)
    - [Self-Directed Support](https://help.nevvon.com/knowledge/help-for-caregivers?hsLang=en#self-directed-support)
    - [Rewards and Recognition](https://help.nevvon.com/knowledge/help-for-caregivers?hsLang=en#rewards-and-recognition)
    - [Other](https://help.nevvon.com/knowledge/help-for-caregivers?hsLang=en#other)
    - [Still Need Help?](https://help.nevvon.com/knowledge/help-for-caregivers?hsLang=en#still-need-help)
- [Help for Managers](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#main-content)

    - [Getting Started](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#getting-started)
    - [Panel Settings](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#panel-settings)
    - [Core Actions](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#core-actions)
    - [Classroom Management](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#classroom-management)
    - [Forms](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#forms)
    - [Quizzes](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#quizzes)
    - [Reports](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#reports)
    - [Surveys](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#surveys)
    - [Supporting Your Employees](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#supporting-your-employees)
    - [Other](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#other)
    - [System Updates](https://help.nevvon.com/knowledge/help-for-managers?hsLang=en#system-updates)

[mailto:support@nevvon.com](mailto:support@nevvon.com)

Copyright © 2025, Nevvon