Security Advisory: Assessment of PHP Vulnerabilities (PHP2Shell) - No Impact to PDK.io – ProdataKey, Inc.

Date: October 23, 2026

Impact to ProdataKey: None (Not Affected)

Action Required: None

On October 21, 2026, security researchers disclosed critical remote code execution vulnerabilities affecting PHP (CVE-2026-109618 and CVE-2026-109619, collectively known as "PHP2Shell").

ProdataKey does not use PHP on the PDK.io platform, web app, iOS or Android mobile apps, or hardware. As a result, the PDK offering is not affected, and no steps or remediation are required.

While this does not impact PDK, partners may want to learn more about the PHP2Shell vulnerabilities and the systems impacted directly from The PHP Foundation website.