How Henry Schein One responded to PHP2Shell
On October 21, 2026, Henry Schein One began applying security updates to address PHP2Shell, a pair of vulnerabilities in PHP, the programming language used across many web applications and services. We had coordinated our patching response in advance of the official disclosure and moved quickly to deploy updates to affected servers.
What happened: PHP2Shell refers to two security vulnerabilities in PHP that could, on vulnerable systems, allow an attacker to execute code without authentication. The PHP maintainers released patches to address these issues.
Our response: Henry Schein One’s security team monitors emerging threats continuously and works to protect all the data in our care. We have no evidence that these vulnerabilities were ever exploited on systems that Henry Schein One controls. Our advance preparation allowed us to deploy patches quickly once the official updates were released.
What you should know: If you have questions about your specific software or service, or if you’ve experienced any service disruptions, please contact Henry Schein One Product Support. Our support team can confirm which products were affected and provide any customer-specific guidance.
Frequently asked questions
Frequently asked questions
What is PHP2Shell?
PHP2Shell is the name given to two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) disclosed on October 21, 2026. On affected systems, these vulnerabilities in PHP would allow for remote code execution without authentication. PHP maintainers released security updates to address these issues.
Which Henry Schein One products were affected?
Henry Schein One patched all PHP systems that it controls.
Do I need to take action?
There is no action required on your part for systems which Henry Schein One operates.
Was customer data affected?
Henry Schein One has no evidence that any systems we control had these vulnerabilities exploited on them.
Why were some servers temporarily offline?
Some servers experienced brief interruptions while security updates were being applied.
Where can I get more information?
For questions about your software, service, or to report any concerns, contact Henry Schein One Product Support. Additional technical details are available in the official PHP advisory.