In recent days, we have received an increasing number of inquiries regarding the recently disclosed critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), also known as PHP2Shell.
First and foremost: The Pathfinder Suite (Pathfinder Client, Pathfinder Server, and Pathfinder Mobile) as well as the Pathfinder Portal are not affected by these vulnerabilities.
We immediately assessed the situation and implemented all necessary security measures on Wednesday, October 21, 2026. Based on our latest assessment, there is no known remaining security risk to our website related to these vulnerabilities.
The security of our systems and the protection of our customers’ data are our highest priorities. We therefore respond promptly and consistently to newly identified security risks.
If you have any further questions, please do not hesitate to contact us. Our support team will be happy to assist you at support@pathfinder.de.