Upshop

Dear Customer,

We are following up on our October 23 communication regarding the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to share our latest remediation progress.

Progress Since Our Last Update

SMP Cloud and API: Patching has been completed for all Upshop-hosted UAT and production environments.
Remediation in Progress

FRP Cloud: Production deployment is targeted for the evening of October 26. Upshop is managing the patching process, and no action is required from customers using this hosted solution.

On-Premise Environments: Our teams are preparing remediation guidance and patching instructions for affected customer-managed environments. Additional information will be provided as it becomes available.
Previously Completed

Waste360 and DCP: Both applications have been fully patched.
Not Affected

Upshop cloud products, ShopperKit, Magic, SDS, CDS, and InterStore are not impacted by these vulnerabilities.
If you need assistance determining whether your environment is affected, please contact our Support team at support@upshop.com.

Search

Need assistance? Our Support Portal is available 24/7 to access knowledge articles, submit tickets, and track your requests.

To request that an existing ticket be escalated, please call the Support phone number. For more information in contacting our support team, see Contacting Upshop Support here.

Critical production issues are supported 24/7.

Standard support requests are handled during regular support hours: Monday–Friday, 24 hours a day, and Saturday, 8:30 AM–6:00 PM ET.

Upshop

Search

Categories