Equipe is not affected by the PHP security issue
On 21 October PHP released fixes for two critical security flaws, CVE-2026-109618 and CVE-2026-109619. They are often called PHP2Shell. Both let someone run their own code on a server that runs PHP. Several clubs have asked us if Equipe is affected.