(SEC-en) MB-SEC-2026-001 – phpshell vulnerability

Advisory ID

MB-SEC-2026-001

Published

2026-10-26

Vulnerability

phpshell (CVE-2026-XXXXX)

Severity (CVSS)

Critical

MBioLIMS affected

No

Customer action

None

Summary

A critical vulnerability known as "phpshell" was publicly disclosed in PHP, allowing remote code execution on affected web servers.

Impact on MBioLIMS

MBioLIMS is not affected. The application is built on Java and does not use PHP in any of its components.

Modul-Bio's corporate website, which does use PHP, was updated as a precaution on 26 October 2026. The website is hosted separately and has no connection to customer MBioLIMS installations or data.

Recommendation

No action is required on your side.