22.10.2026 - PHP2Shell vulnerability October 22, 2026 08:53 Updated On 2026-10-21, a critical vulnerability known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) has been disclosed. In this context, we would like to inform you that none of the BOC products (ADONIS, ADOIT, ADOGRC) include any PHP components. Therefore, BOC products are not subject to this vulnerability, neither in SaaS deployments nor in on-premises deployments. Consequently, no mitigation or remediation actions need to be taken to secure instances of ADONIS, ADOIT, and ADOGRC.We are committed to maintaining a strong security posture and communicating transparently about developments in the software supply chain landscape.BOC Corporate Security and Compliance Team. Related articles How do I export application components with attachments in ADOIT?