PHP Security Vulnerabilities – Is Navigator DMS Affected?

Two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, also referred to as PHP2Shell, were reported in October 2026.

These vulnerabilities affect certain versions of PHP, a programming language commonly used in websites and web-based applications. Organisations using affected versions have been advised to review their systems and apply the necessary security updates.

Is Navigator DMS Affected?

No. Navigator DMS is not affected by these vulnerabilities.

Following a review with our technical teams, we have confirmed that Navigator DMS and its associated services do not utilise PHP.

This includes the application itself and the supporting services, integrations and infrastructure used to deliver Navigator.

As a result, these PHP-specific vulnerabilities do not present a risk to Navigator DMS.

Do Customers Need to Take Any Action?

No action is required in relation to Navigator DMS.

As Navigator does not use PHP, no security patches, configuration changes or software updates are necessary to address these particular vulnerabilities.

Customers should, however, ensure that any other applications, websites or third-party systems they operate are reviewed by their own IT providers where appropriate.

Our Commitment to Security

We take the security of Navigator DMS and our customers' information seriously.

We continually review relevant security advisories and work with our technical teams to identify and address potential vulnerabilities where applicable.

Last reviewed: 23 October 2026