Request for Assistance with PHP Updates on Centreon 24.10 (PHP2Shell: CVE-2026-109618 and CVE-2026-109619)

Question

Hello,I am contacting you to ask whether you have any procedures or recommendations to mitigate the PHP2Shell vulnerability associated with CVE-2026-109618 and CVE-2026-109619.Our Centreon instance is running version 24.10.14 on AlmaLinux 9.Thank you in advance for your assistance. I look forward to hearing from you.Best regards,

fgbetokpanou · Answer

Centreon doesn’t provide or maintain PHP, so the fix for these CVEs on AlmaLinux 9 comes from your distribution’s repositories. Our Security Team published the recommended steps for on-premise installations here: PHP Security Advisory – Action Required for Centreon On-Premise Installations.

In short: review the AlmaLinux advisory, install the corrected PHP packages, restart PHP services and workers, confirm the fix is included (it may be backported without changing the version number), then validate your Centreon platform. Temporary mitigations are listed in the bulletin if you can’t update right away, but they only reduce exposure.

Centreon 24.10 supports PHP 8.2. For compatibility questions, contact Centreon Support with your Centreon version, distribution and installed PHP package version.

Sign up

Login to the community