A Note on PHP2Shell
MIM products and customer-facing services are not developed using PHP and are therefore not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). As always, we continue to monitor our internal and enterprise systems and apply appropriate security updates where applicable as part of our standard security practices.
Security Advisories
Despite the best efforts and intentions, cybersecurity vulnerabilities are a reality that all vendors and customers must deal with. When a critical vulnerability has been identified and classified, MIM Software makes every effort to inform, assist, and mitigate affected customers first. Once affected customers have had a chance to upgrade their software, our next concern is transparency. To that end, Common Vulnerabilities and Exposures (CVEs) found in MIM Software are recorded below.
