In October 2026, critical PHP vulnerabilities known as PHP2Shell were disclosed. These vulnerabilities can allow attackers to execute code remotely on vulnerable servers without authentication.
friendlyway products are not affected by these vulnerabilities, as PHP is not part of their technology stack. This applies to the friendlyway Cloud Platform, the visitor management system, our Digital Signage solutions, and the associated kiosk software. No action is required from our customers.
The public friendlyway website uses PHP but is not part of our customer-facing products and services. The website has already been updated, and the vulnerability has been addressed.
friendlyway places great importance on the security of its solutions and responds promptly to identified security threats to ensure the reliable operation of its products and services.
If you have any questions or your IT team requires further information, please feel free to contact us directly.
