This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Extreme Networks
- Community List
- Network Management & Authentication
- ExtremeCloud IQ- Site Engine Management Center
- Re: PHP Security Vulnerability – Patch Availabilit...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
PHP Security Vulnerability – Patch Availability for XIQ-Site Engine and ExtremeControl
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
Hi Extreme Community,
Following the critical PHP security vulnerability as reported today by the UK NCSC, we would like to understand the potential impact on XIQ-Site Engine (XIQ-SE) and ExtremeControl.
Reference: https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
Could Extreme Networks clarify the following?
- Are XIQ-Site Engine and ExtremeControl affected by this vulnerability?
- If affected, is Extreme planning to release a security update or hotfix to address it?
- Is it possible and officially supported to patch or upgrade PHP independently on XIQ-Site Engine and ExtremeControl, without waiting for a full product update?
We would particularly appreciate guidance on whether manually updating PHP could affect product functionality or support eligibility.
Thanks in advance for any clarification or recommendations.
Best regards,
Ronald
- Ronald
Solved! Go to Solution.
2 ACCEPTED SOLUTIONS
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
12 REPLIES 12
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
I see that ExtremeControl is still under investigation. For critical vulnerabilities like this, it would be helpful if Extreme could provide some recommended mitigation measures while the investigation is ongoing.
- Ronald
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
Providing ALL a quick response regarding the recent CVE-2026-109618 and CVE-2026-109619 (PHP2Shell) PHP vulnerabilities.
Extreme Networks’ Product Security Incident Response Team (PSIRT) is actively investigating these vulnerabilities. At this time, the investigation is still in progress, and we do not yet have a confirmed product-impact status to share.
We will provide a further update once PSIRT has concluded its investigation.
Thank you for your patience while the investigation is completed.
When the Security Advisories go live, this thread -- and I assume many others will be updated.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
2 weeks ago
Disappointing to not have any response from Extreme yet on such a high profile vulnerability?
