general updates
October 22, 2026
Security update: Beefree SDK is not affected by the “php2shell” PHP vulnerabilities
Researchers from Calif.io, Wiz, OpenAI, and Quarkslab recently disclosed two vulnerabilities in PHP, known as “php2shell” (CVE-2026-109618 and CVE-2026-109619). They affect web servers running PHP 5.4 or later. If an application processes maliciously crafted HTTP requests, attackers could use them to cause service outages, run code remotely, or expose data.
Beefree SDK is not impacted. The core architecture behind Beefree SDK doesn’t use PHP to process web requests, so the platform and your data aren’t exposed to these vulnerabilities.
No action is required on your side. If you have any questions, our support team is here to help.
