Our response to PHP2Shell
PHP2Shell refers to a pair of critical vulnerabilities currently affecting PHP, a programming language widely used by websites, which could allow a threat actor to compromise a vulnerable (unpatched) web server.
There is currently no confirmed evidence of exploitation or compromise of any IFS sites or products.
IFS has taken proactive action to address potential vulnerabilities across two key areas. For both our internal and internet-facing environments, we have identified any affected systems and have mitigated via patching or taking systems offline where required.
We have assessed all IFS products including those in our portfolio of companies, including POKA, Ultimo, Softeon and Empower MX.
Remediations are actively tracked, and updates will be posted here in the coming days, including confirmation of final remediation. If you have any questions, please email us at trust@ifs.com and we will be on hand to assist.




