You may have seen recent news regarding PHP2Shell, the name used for two critical PHP vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619; PHP is a programming language widely used across the Internet and supports various website platforms.
Within the CampusCloud ecosystem, PHP is used for our Magento-based eCommerce sites but is not used by other areas of the system. The applicable security updates were installed automatically across the eCommerce environment; all CampusCloud eCommerce sites are patched and are not currently vulnerable to these identified issues.
Posted Oct 22, 2026 - 09:04 EDT
This incident affected: CampusCloud Core Services (eCommerce Platform).