2026-10-21
Intra2net System Hotfixes for php2shell
The Intra2net Business Server can potentially be exploited with the "php2shell" vulnerability. These attacks are potentially possible even for unauthenticated users.
- System Hotfix 517 is available for Intra2net Business Server version 7.1.1.
- System Hotfix 513 is available for Intra2net Business Server version 7.1.0.
By default, system hotfixes are downloaded and applied fully automatically. You can check the current version in the menu Information > Version. If the system hotfix has not yet been applied, it can be started manually in the menu System > Update > Manual via the button "Update spam filter rules and system hotfixes". No system reboot is required.
Intra2net Network Security and Intra2net Security Gateway are not affected.
If you are using a version older than Intra2net Business Server 7.1.0, you must first update the system to version 7.1.0 before the hotfix can be applied.
The hotfixes resolve CVE-2026-109618 (CVSS 9.2, critical) and CVE-2026-109619 (CVSS 9.2, critical).