---
title: AppEnhancer - PHP2Shell Remote Code Execution (RCE)
description: Is AppEnhancer affected by the PHP2Shell Remote Code Execution (RCE) vulnerabilities CVE-2026-109618 and CVE-2026-109619?
---

[Skip to content](https://knowledgebase.metasource.com/appenhancer-do#main-content)

[![2026 MetaSource Logo - Light Background](https://knowledgebase.metasource.com/hs-fs/hubfs/Images/Logos/2026%20MetaSource%20Logo%20-%20Light%20Background.png?width=226&height=29&name=2026%20MetaSource%20Logo%20-%20Light%20Background.png)](https://www.metasource.com/)

Open main navigation

Close main navigation

- [Go to Customer Portal](https://clientsupport.metasource.com/tickets-view)

[Go to Customer Portal](https://clientsupport.metasource.com/tickets-view?hsLang=en)

 Hello. How can we help you?

- There are no suggestions because the search field is empty.

1. [MetaSource Knowledge Base](https://knowledgebase.metasource.com/?hsLang=en)
2. [OpenText AppEnhancer (ApplicationXtender)](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en)
3. [Security](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#security)

# AppEnhancer - PHP2Shell Remote Code Execution (RCE)

## Is AppEnhancer affected by the PHP2Shell Remote Code Execution (RCE) vulnerabilities CVE-2026-109618 and CVE-2026-109619?

**Cause**

Clients may have security concerns regarding the recently disclosed **PHP2Shell Remote Code Execution (RCE) vulnerabilities**, tracked as **CVE-2026-109618** and **CVE-2026-109619**, and whether these vulnerabilities affect AppEnhancer.

**Resolution**

AppEnhancer does **not use PHP as part of its standard application prerequisites** and is therefore **not currently considered directly impacted by CVE-2026-109618 or CVE-2026-109619**.

If PHP has been installed separately on the AppEnhancer server for another application or service, that PHP installation should be reviewed independently and patched or remediated as appropriate.

**Additional Information**

The assessment above applies to the standard AppEnhancer product prerequisites and components. Any third-party software independently installed on the same server should be evaluated separately for exposure to these vulnerabilities.

 

- [Tungsten (Kofax)](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#main-content)

    - [Installation and Setup](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#installation-and-setup)
    - [Troubleshooting](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#troubleshooting)
    - [Updates](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#updates)
- [OpenText AppEnhancer (ApplicationXtender)](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#main-content)

    - [Installation and Setup](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#installation-and-setup)
    - [Basic Features](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#basic-features)
    - [Troubleshooting](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#troubleshooting)
    - [Updates](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#updates)
    - [System Requirements](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#system-requirements)
    - [Security](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#security)
- [OpenText Intelligent Capture (Captiva)](https://knowledgebase.metasource.com/opentext-intelligent-capture-captiva?hsLang=en#main-content)

    - [Installation and Setup](https://knowledgebase.metasource.com/opentext-intelligent-capture-captiva?hsLang=en#installation-and-setup)
    - [Troubleshooting](https://knowledgebase.metasource.com/opentext-intelligent-capture-captiva?hsLang=en#troubleshooting)
- [PaperVision](https://knowledgebase.metasource.com/papervision?hsLang=en)
- [OpenText OTS (Output Transformation Server)](https://knowledgebase.metasource.com/opentext-ots-output-transformation-server?hsLang=en#main-content)

    - [OTS](https://knowledgebase.metasource.com/opentext-ots-output-transformation-server?hsLang=en#ots)
- [FileBound](https://knowledgebase.metasource.com/filebound?hsLang=en)

[![2026 MetaSource Logo - Light Background](https://knowledgebase.metasource.com/hs-fs/hubfs/Images/Logos/2026%20MetaSource%20Logo%20-%20Light%20Background.png?width=226&height=29&name=2026%20MetaSource%20Logo%20-%20Light%20Background.png "2026 MetaSource Logo - Light Background")](http://www.metasource.com)

[getsupport@metasource.com](mailto:getsupport@metasource.com)

[(888) 634-7684](tel:18886347684)

<https://www.linkedin.com/company/metasource/> <https://x.com/MetaSource> <https://www.facebook.com/MetaSource/> <https://www.instagram.com/metasource/>

© 2025 MetaSource, LLC. All rights reserved.