11.2.0-3 – October 28, 2026

This security update addresses the php2shell vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619).
The Unitrends appliance uses PHP to serve its web interface and application programming interface (API).

Security fixes

• AlmaLinux 9 appliances: PHP is updated to version 8.0.30-8.el9_8.alma.1, which includes the AlmaLinux fix for both vulnerabilities.
• CentOS 7 appliances: Anticipated fix ETA October 29, 2026.
• CentOS 6 appliances: Not affected.

Installing this update

Install this update as soon as possible.

For details, see To install appliance updates.

No reboot is needed.