Atheral Management Portal (AMP) Offline Pending Critical PHP Vulnerability

Incident Report for Atheral

Resolved

Patches for critical vulnerabilities CVE-2026-109618 and CVE-2026-109619 have been applied. Access to AMP has been restored for Atheral clients.

If you have any additional questions, please reach out to our support team at support@atheral.com or 702-470-6887.

-- Atheral Network Operations

Posted Oct 21, 2026 - 09:26 MDT

Identified

Two critical PHP zero-day vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), have been identified. These vulnerabilities could allow unauthorized remote code execution on affected servers.

As a precaution, AMP will remain unavailable until the security patches have been applied and verified, which we anticipate will be completed this afternoon.

For additional technical details, please see https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities

In the meantime, for telephone number orders or E911 updates, please contact our support team at support@atheral.com or 702-470-6887.
-- Atheral Network Operations

Posted Oct 21, 2026 - 08:53 MDT

This incident affected: Atheral Management Portal (AMP).