ICT Services 4 Education

ICT Solutions News Desk

PHP2Shell (CVE-2026-109618 & CVE-2026-109619)

Posted on 23/10/2026 14:13:25

ICT Solutions have liaised with our suppliers and assessed the impact of the recent highly publicised vulnerabilities in PHP. As far as we are aware, most of the systems we provide and support are either completely unimpacted or have already been patched/updated.
 
The only issues we are currently aware of are as follows:
 
Arbor - have temporarily disabled file uploads to mitigate risk while they investigate further
Schools Broadband - have temporarily restricted access to the Netsweeper web filtering portal while mitigations are implemented
 
We would advise you check with any third parties who provide services to your school directly, particularly your school website provider, especially if your site uses WordPress or a similar PHP-based content management system.
 
This page will be updated if/when the situation changes.
Close