Statement from the Passle team, in response to the National Cyber Security Centre's Critical security issue affecting PHP, alert:
PHP published a security update to address a critical security issue (which could have been exploited), and organisations were encouraged to update to the latest (fixed and fully supported) version of PHP.
PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
The Passle platform is not affected by PHP2Shell.
Passle does not use PHP anywhere in its application or hosting infrastructure. This includes the Passle application, hosted content, Passle-hosted pages, and the embed and JavaScript plugins used for website integration. No patching or mitigation is required and no action is necessary for Passle clients.
Last updated 23 Oct 2026