# PHP2Shell (CVE-2026-109618, CVE-2026-109619): Not Applicable to Ignition

**URL:** <https://forum.inductiveautomation.com/t/php2shell-cve-2026-109618-cve-2026-109619-not-applicable-to-ignition/117597>\
**Category:** Security Notices\
**Tags:** not-applicable, cve\
**Created:** [October 25, 2026, 2:30pm UTC](https://forum.inductiveautomation.com/t/php2shell-cve-2026-109618-cve-2026-109619-not-applicable-to-ignition/117597 "2026-10-25T14:30:59Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![nathan.boeger](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nathan.boeger/32/87646_2.png) [@nathan.boeger](https://forum.inductiveautomation.com/u/nathan.boeger)\
**Post date:** [October 25, 2026, 2:30pm UTC](https://forum.inductiveautomation.com/t/php2shell-cve-2026-109618-cve-2026-109619-not-applicable-to-ignition/117597/1 "2026-10-25T14:30:59Z")

</div>

**Ignition is not affected by the “PHP2Shell” memory safety vulnerabilities in core PHP** (CVE-2026-109618, CVE-2026-109619).

Ignition is a Java application that ships its own JRE. No Inductive Automation component (Gateway, Designer, Vision Client, Perspective, launchers, Workstation) includes, depends on, or executes PHP.

**No customer action is required**.

Assessed July 31, 2026. Posted in [Trust Center Ignition Software: Library Vulns / Updates](https://security.inductiveautomation.com/?tcuUid=a845dcfe-7a3e-49cc-9335-549fd2202668).