Published • loading... • Updated
Synology Statement on PHP2Shell Vulnerabilities
Summary by NCNONLINE
2 Articles
2 Articles
A PHP2Shell security vulnerability enabling remote code execution has been discovered in Synology NAS products. KISA has recommended urgent security patches for Synology Calendar and Mail Station, among others, to protect stored data.
Synology Statement on PHP2Shell Vulnerabilities
Following a thorough investigation, the Synology Product Security Incident Response Team (PSIRT) has confirmed that the impact of the recently disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) is limited to systems running certain PHP-dependent packages. The affected packages are Calendar, IDrive, Joomla, KodExplorer, MailStation, MediaWiki, phpMyAdmin, vtigerCRM, Web Station, and WordPress. Synology has released PHP secu…
Coverage Details
Total News Sources2
Leaning Left0Leaning Right1Center0Last UpdatedBias Distribution100% Right
Bias Distribution
- 100% of the sources lean Right
100% Right
R 100%
Factuality
To view factuality data please Upgrade to Premium
