Benchmark Gensuite Statement on PHP2Shell \(CVE-2026-109618 and CVE-2026-109619\)
October 21, 2026
Benchmark Gensuite is aware of the PHP2Shell vulnerabilities disclosed today, and our security and IT operations teams are actively monitoring the situation.
The Benchmark Gensuite platform does not use PHP. Customer applications, APIs, data, and hosted environments are not affected by these vulnerabilities, and no customer action is required.
As an added precaution, we have deployed additional web application firewall protections against this vulnerability.
The security of our customers’ data is our highest priority. We will continue to monitor developments and will provide updates if anything changes. Customers with questions can contact their Benchmark Gensuite account representative.
