DirectBiller - PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619): DirectBiller not affected – Notice details

PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619): DirectBiller not affected

Posted 20 days agoOctober 23, 2026 at 3:32 AMUTC

On October 21, 2026, the PHP project released fixes for two critical vulnerabilities known as “PHP2Shell.” DirectBiller does not run on PHP, and no production system or customer-facing service was affected. No action is needed for your DirectBiller services. If you run your own PHP-based systems, please check with your IT team or vendors. For questions, contact your Aliaswire Customer Success Manager.