Are any ICVA versions vuln to recent php2shell?

Keaney · October 21, 2026, 1:16pm

CVE-2026-109618 and CVE-2026-109619

ciden · October 21, 2026, 4:27pm

Any statement from the ICVA team?

Michael · October 21, 2026, 5:27pm

Yes, the ICVA control panel on TCP port 4443 is affected by CVE-2026-109618 and CVE-2026-109619. We’re releasing ICVA firmware 2.14.4, which fixes both, within the next one to two days.

Until you can upgrade, please make sure the control panel isn’t reachable from the Internet. Restrict access to port 4443 to trusted networks only, such as a management VLAN or VPN.