On October 21, 2026, two critical PHP security vulnerabilities, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), were publicly disclosed.

The Easypromos engineering team responded immediately and has successfully deployed the necessary security patches across our production infrastructure, including updated PHP runtimes with the corresponding security fixes.

In addition, we have reinforced our Google Cloud Armor Web Application Firewall (WAF) with updated security rules to detect and block malicious scanning and exploitation attempts.

These measures are part of our ongoing commitment to maintaining a secure, reliable, and continuously updated platform for our customers and their campaigns.