Skip to main content
As part of NetSupport’s commitment to support our customers, we continue to assess any risks to our products and services. This will include sharing key information as we help customers ensure that they are able to manage any risks to their own systems, services or supply chain.
On October 21st 2026, the PHP project released critical security updates to fix remote code execution (RCE) vulnerabilities known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) affecting PHP versions 5.4 to 8.5.
None of the NetSupport solutions use PHP and therefore have not been impacted by this vulnerability.
Solutions analysed and identified as Secure
- classroom.cloud: web services, all platforms and mobile apps
- 247connect: web services, all platforms and mobile apps
- NetSupport Manager: all platforms and mobile apps
- NetSupport School: all platforms and mobile apps
- NetSupport DNA: all platforms, mobile apps and web console
- NetSupport Notify: all platforms, mobile apps and web console