Critical vulnerabilities in PHP were disclosed today (CVE-2026-109618 and CVE-2026-109619), better known as php2shell. Many websites and services have been temporarily taken offline as a precaution. FileCap has not been affected by this.
What does this mean for you?
You can continue to use FileCap as usual to securely send and receive emails and (large) files. No action is required on your part: you don't need to update anything, log in again, or do anything differently than you normally do.
Why wasn't FileCap affected?
FileCap is built in Java and does not use PHP. As a result, the php2shell vulnerabilities do not apply to FileCap. In addition, our security is client-side (DLP), with a TLS connection to the server and encryption combined with hash verification.
Our marketing website was also unaffected. It runs on Webflow and is therefore not affected by these vulnerabilities.
Frequently Asked Questions
What is php2shell?
"php2shell" is the name given to the critical vulnerabilities in PHP that were disclosed on October 21, 2026, and registered as CVE-2026-109618 and CVE-2026-109619. As a precautionary measure, many websites and services were temporarily taken offline as a result.
Has FileCap been affected by php2shell?
No. FileCap is built in Java and does not use PHP. The marketing website on Webflow was not affected either.
As a FileCap user, do I need to do anything?
No, you don't need to take any action on your end. You can continue to use FileCap as usual to securely send and receive emails and (large) files.
Questions?
Do you have questions about php2shell or FileCap's security? Please contact us at sales@filecap.com.
