Is Kerio Connect affected by PHP2SHELL (CVE-2026-109618 ; CVE-2026-109619.)

Information

Our Engineering team has completed an analysis of the GFI Kerio Connect stack and confirmed that Kerio Connect is not affected by PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619.

Note: Any separately installed 3rd-party PHP applications or runtimes should be assessed independently.