Over the past week, the PHP security vulnerabilities known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) have received a great deal of attention. We would therefore like to let you know that Sprend does not use PHP and is not affected. Our servers run Debian Linux, and we install Debian security updates on a regular basis. If you have any questions, please feel free to contact us at +46 10 129 29 10 or support@sprend.com.