---
title: "PHP Security Vulnerability – Customer Update"
slug: "keypro-products-not-affected-by-php2shell-vulnerability"
updated: 2026-10-24T16:47:52Z
published: 2026-10-24T16:47:52Z
canonical: "support.keypro.fi/keypro-products-not-affected-by-php2shell-vulnerability"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.keypro.fi/llms.txt
> Use this file to discover all available pages before exploring further.

# PHP Security Vulnerability – Customer Update

**Update 2026-10-23 12:00 UTC:** The printing issues have been resolved, and printing works normally for all customers.

Two critical PHP vulnerabilities (**CVE-2026-109618** and **CVE-2026-109619**) are being actively exploited worldwide.

Keypro’s main products (**KeyCom, KeyAqua, KeyHeat, and KeyLight**) are not affected. The vulnerability affects only a PHP module in a helper service used for printing, which was kept for backward compatibility. Keypro has removed this module from all SaaS environments, and they are secure as of **21 October 2026 at 16:15 UTC**. No action is required from SaaS customers.

**Printing:** A small number of customers may still experience printing issues. We are working to resolve this as soon as possible.

**On-premises customers:** The same fix, removing the affected PHP module from the printing service, is required. Keypro will contact affected customers with instructions.

For questions, please contact [support@keypro.fi](mailto:support@keypro.fi).