Is FleetCheck affected by the recent PHP vulnerabilities?

We can confirm that the FleetCheck platform is not affected by the recently reported PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, known as “php2shell”).

These flaws are in the PHP software used to run websites, so they only affect systems built on PHP. The FleetCheck web application, our mobile apps and our reporting services are built on Microsoft .NET and don’t use PHP. Your data is not exposed by this issue.

We keep a close eye on security advisories like this one and review each one against our systems as soon as it’s published.