42Gears Security and Compliance Standards

Detailed Advisory Notice

Security Advisory Statement: Recent PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Overview

42Gears is aware of the recent security vulnerabilities associated with PHP (CVE-2026-109618 and CVE-2026-109619). We would like to reassure our customers that 42Gears SureMDM is completely unaffected by these vulnerabilities.

PHP Usage in SureMDM

SureMDM does not use PHP in any part of its architecture or product components. Specifically:

  • SureMDM Web Console: Does not use PHP.
  • SureMDM Server (On-Premise & SaaS): Does not use PHP.
  • SureMDM Hub & Nix Agents: Do not use PHP.
  • Backend APIs & Microservices: Do not use PHP.
  • Third-Party Bundled Dependencies: No PHP components or PHP-based runtimes are bundled or deployed as part of SureMDM.

Impact Assessment

Since PHP is not present anywhere in the SureMDM platform:

  • Impact Status: SureMDM is NOT affected by CVE-2026-109618 or CVE-2026-109619.
  • Scope: Neither SureMDM SaaS/Cloud-hosted instances nor SureMDM On-Premise installations are impacted.

Remediation Plan

  • Remediation Timeline: No patching, remediation, or updates are required for SureMDM regarding these CVEs.
  • Patched Version Status: N/A (Not Applicable).
  • Interim Mitigations: No interim mitigations or administrative actions are required by administrators or customers.