FYI Unaffected By PHP2Shell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

On 21 October 2026, two critical remote code execution vulnerabilities, known as PHP2Shell, were disclosed in the PHP programming language. They affect web applications that run on unpatched versions of PHP.

The FYI platform is not built on PHP and is not affected by these vulnerabilities. Your practice does not need to take any action in FYI, and your FYI data is not at risk from this issue.

FYI continually monitors security disclosures as they are published and assesses them against our platform. If you have any questions, please contact our support team.