Portworx Backup 3.1.2 is now available with fixes for CVE-2026-109618 and CVE-2026-109619, also known as PHP2Shell.
Fixed in this release
CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
-
Issue: The PHP runtime in the on-premises PX-Central / Portworx Backup UI backend is affected by these vulnerabilities.
-
Resolution: Portworx Backup 3.1.2 updates the pxcentral-onprem-ui-backend image to PHP 8.2.35, which includes the fixes for both CVEs. This is a security update; there are no functional changes in this patch release.
Learn more
-
Everpure Security bulletin: CVE-2026-109618 and CVE-2026-109619
-
Portworx Backup 3.1.2 release notes: Changes and What’s new
-
Portworx Backup - How to Upgrade: Upgrade Portworx Backup | Portworx Backup On-Premises Documentation
-
Portworx Backup - Prerequisites: Install Prerequisites | Portworx Backup On-Premises Documentation
-
Portworx Backup - Docs: Portworx Backup Documentation | Portworx Backup On-Premises Documentation
On-behalf of - Portworx Backup Team,
Vijay Nagarajan