Official company update
What You Need to Know About the Critical PHP Vulnerabilities (PHP2Shell)
Publisher preview
On October 21, 2026, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address CVE-2026-109618 and CVE-2026-109619. Both vulnerabilities can enable unauthenticated remote code execution in affected deployments and carry reported CVSS v4.0 base scores of 9.2. CVE-2026-109619 can also expose memory. The pair is also known collectively as “PHP2Shell.” Salesforce is actively assessing its products, services, and infrastructure for potential impact. At this time, Salesforce has no evidence of exploitation affecting its systems or customer data. If we do, we will notify impacted customers without undue delay. Organizations managing PHP-based websites, applications, or third-party software should assess those environments and apply appropriate security updates.
A saved ApplyDjinn digest is not available for this story yet.
This preview is supplied by the publisher. The complete publication remains at its original source.
Request a correction or removalApplyDjinn context
What else is visible for Salesforce?
These are observations in our catalog around the company, not claims made by the article. A publication does not establish why hiring, search interest, or share prices moved.
Current roles
117
30-day current-market scope
Company stories · 30d
28
28 official · 0 independent
Attention records · 7d
12
0 Google · 12 Polymarket
Coverage mix
Attention sources
Open roles
117
Technical roles
85 of 117
Observed hiring change
+103 roles
Hiring and market history
Daily vacancy snapshots show this company’s observed hiring; no standalone public ticker is assigned.
Vacancy history
Current role mix
85 technical · 32 other
73% of currently observed roles are technical.
Vacancy history uses saved daily snapshots through 2026-11-01. News counts are dated publications; attention counts are matched records, not search volume or prediction probabilities.