Upshop

Dear Customer,

We are following up on our October 28, 2026 communication regarding the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to share our latest remediation progress.

Progress Since Our Last Update

FRP Cloud: Automated testing and deployment to the UAT environment have been completed successfully.
Remediation in Progress

FRP Cloud: Production deployment is scheduled for October 28 at 8:30 p.m. Eastern Time.

Remediation efforts remain underway for affected customer-managed environments. We will continue to provide updates as progress is made and additional information becomes available.

SMP Cloud & API: Patching has been completed for all Upshop-hosted UAT and production environments. Waste360 and DCP: Both applications have been fully patched.

Upshop cloud products, ShopperKit, Magic, SDS, CDS, and InterStore are not impacted by these vulnerabilities.

support@upshop.com

Search

Need assistance? Our Support Portal is available 24/7 to access knowledge articles, submit tickets, and track your requests.

To request that an existing ticket be escalated, please call the Support phone number. For more information in contacting our support team, see Contacting Upshop Support here.

Critical production issues are supported 24/7.

Standard support requests are handled during regular support hours: Monday–Friday, 24 hours a day, and Saturday, 8:30 AM–6:00 PM ET.

Upshop

Search

Categories