PriApps products not affected by PHP2Shell vulnerabilities
On October 21, 2026, the PHP project disclosed two critical vulnerabilities in the PHP programming language, known as “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619). Because they affect PHP itself, they have drawn wide attention across the industry, and many organizations are reviewing the software they run.
PriApps products are not affected.
PriApps does not use or include PHP. The PriApps web interface is served by a PriApps native module, and no PHP runtime is installed, bundled or required. Because these vulnerabilities exist only in the PHP engine, there is no way for them to affect PriApps.
This applies to:
- PriApps SSO (on-premises), all versions
- PriApps Secure Print (on-premises), all versions
- PriApps for Microsoft 365 (on-premises), all versions
- PriApps CloudPrint
- PriApps CloudPrint for Microsoft 365
No action is required. PriApps customers don’t need to apply updates, change configurations or contact support in relation to PHP2Shell.
A note on security scans. Some automated vulnerability scanners and assessments may report PHP2Shell against PriApps servers based on assumptions about bundled web components, rather than on detecting PHP. If you receive a report like this, you can confirm that no PHP files or modules exist in the PriApps installation folder. Our support team is also happy to provide written confirmation for your security or compliance records.
If you have any questions, please contact your PriApps Authorized Reseller or PriApps directly.
PriApps SSO →PriApps Secure Print →PriApps CloudPrint →PriApps for Microsoft 365 →