Prey is not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
We are aware of the recently disclosed PHP2Shell vulnerabilities affecting the core PHP engine. Prey does not use PHP in its products, services, or supporting infrastructure. Following a review by our security team, we have confirmed that these vulnerabilities do not affect Prey, and no action is required from our customers at this time.
Our team continues to monitor the situation and will share an update if anything changes. If you have any questions, please reach out to our support team