We are aware of the recently disclosed critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, known as “PHP2Shell”. We have completed our assessment and confirmed that Signagelive is not affected.

Signagelive does not use PHP in its technology stack, so these vulnerabilities do not apply.

You do not need to take any action. We will continue to monitor the situation and will update this page if anything changes.

If you have any questions, please contact our support team.