Dear Board community,
You may have seen this week’s news about PHP2Shell, two critical remote code execution vulnerabilities in the PHP language runtime, disclosed on October 20 and patched by the PHP project on October 21, 2026.
We want to reassure our customers and partners right away: Board is not affected.
The Board platform does not use PHP in any of its components. Our platform, including third-party libraries and the infrastructure behind the Board Cloud service, have no PHP runtime in use.
Board Cloud customers don’t need to take any action. Customers running Board on-premises also don’t need to change anything in their Board installation.
We continue to monitor the situation and will update this post if anything changes. If you have questions, please contact Board Support.
