This page tracks publicly reported security vulnerabilities relevant to Intuiface. For each issue, we explain what it is, whether Intuiface is affected, and the actions taken to address it.

Last updated: October 26, 2026

PHP2Shell

Status

Intuiface infrastructure was not affected.

What is it?

PHP2Shell refers to security flaws in PHP, a technology used to run many websites and online services. These flaws could allow attackers to run unauthorized commands on vulnerable servers.

The security community first publicly reported this vulnerability on 22-October-2026

Was Intuiface exposed?

No part of Intuiface’s infrastructure uses PHP, so PHP2Shell had no effect.

What action was taken?

As Intuiface does not use PHP, no patches were required to address this vulnerability.

Node2Shell

Status

Affected services were patched on 23-October-2026.

What is it?

Node2Shell is a security flaw in a component of Node.js, a technology used to run online services. It could allow attackers to run unauthorized commands on vulnerable servers.

The security community first publicly reported this vulnerability on 23-October-2026.

Was Intuiface exposed?

Some Intuiface server-based services—including Headless CMS, Analytics, API Explorer, and Web Triggers—used a vulnerable version of Node.js and required patching.

What action was taken?

We applied the required security patches on Friday, October 23, 2026, removing the vulnerability from the affected services. No action was required from Intuiface users.

We also reviewed server logs for signs of exploitation before applying the patches. We found no suspicious activity or evidence of compromise in the logs examined.

Questions?

If you have questions about these vulnerabilities or their impact on your use of Intuiface, please contact Intuiface Support.