+3Hello,
I am contacting you to ask whether you have any procedures or recommendations to mitigate the PHP2Shell vulnerability associated with CVE-2026-109618 and CVE-2026-109619.
Our Centreon instance is running version 24.10.14 on AlmaLinux 9.
Thank you in advance for your assistance. I look forward to hearing from you.
Best regards,
Best answer by fgbetokpanou
Centreon doesn’t provide or maintain PHP, so the fix for these CVEs on AlmaLinux 9 comes from your distribution’s repositories. Our Security Team published the recommended steps for on-premise installations here: PHP Security Advisory – Action Required for Centreon On-Premise Installations.
In short: review the AlmaLinux advisory, install the corrected PHP packages, restart PHP services and workers, confirm the fix is included (it may be backported without changing the version number), then validate your Centreon platform. Temporary mitigations are listed in the bulletin if you can’t update right away, but they only reduce exposure.
Centreon 24.10 supports PHP 8.2. For compatibility questions, contact Centreon Support with your Centreon version, distribution and installed PHP package version.
+12Centreon doesn’t provide or maintain PHP, so the fix for these CVEs on AlmaLinux 9 comes from your distribution’s repositories. Our Security Team published the recommended steps for on-premise installations here: PHP Security Advisory – Action Required for Centreon On-Premise Installations.
In short: review the AlmaLinux advisory, install the corrected PHP packages, restart PHP services and workers, confirm the fix is included (it may be backported without changing the version number), then validate your Centreon platform. Temporary mitigations are listed in the bulletin if you can’t update right away, but they only reduce exposure.
Centreon 24.10 supports PHP 8.2. For compatibility questions, contact Centreon Support with your Centreon version, distribution and installed PHP package version.
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.