PHP Vulnerability Responses by Company

Telos Alliance

Global cloud / infrastructure
Aliases / services
Telos Alliance / TLS Corp. / Zephyr Connect SE / Altus SE / Pathfinder Core Pro / telosalliance.com
Official website
https://www.telosalliance.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Pathfinder Core Pro

Response status
Fixed RC available; user upgrade required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

TLS Corp. brand providing broadcast audio equipment and software.

Versions through 1.10.13 are affected. The advisory offers RC 1.10.14 with fixes for both CVEs; the 1.10 release notes list the fixes and downloads.

Scope: This is Pathfinder patch availability; Zephyr Connect SE and Altus SE have separate statuses.

What users should do

Confirm the appropriate update procedure for your model and deployment with support, then apply it. Restrict network exposure until patched.

Official service URL

Source URLs

  1. PHP2Shell product advisoryhttps://docs.telosalliance.com/docs/php2shell-vulnerabilities-cve-2026-109618-cve-2026-109619Response evidence
  2. https://docs.telosalliance.com/docs/110xhttps://docs.telosalliance.com/docs/110xService and operation documentation

Zephyr Connect SE

Response status
Patch in progress; restrict network exposure
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Versions through 1.1.11 are affected. The October 22 advisory says a patch is in progress. The product release information checked did not establish completion of this fix.

Scope: The Pathfinder fix does not establish this product's remediation.

What users should do

Restrict external network exposure and ask support for the latest fixed release and installation instructions.

Source URLs

  1. PHP2Shell product advisoryhttps://docs.telosalliance.com/docs/php2shell-vulnerabilities-cve-2026-109618-cve-2026-109619Response evidence
  2. https://docs.telosalliance.com/docs/telos-zephyr-connect-se-release-noteshttps://docs.telosalliance.com/docs/telos-zephyr-connect-se-release-notesService and operation documentation

Altus SE

Response status
Patch in progress; restrict network exposure
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Versions through 2.2.3 are affected. The October 22 advisory says a patch is in progress. The product release information checked did not establish completion of this fix.

Scope: The Pathfinder fix does not establish this product's remediation.

What users should do

Restrict external network exposure and ask support for the latest fixed release and installation instructions.

Source URLs

  1. PHP2Shell product advisoryhttps://docs.telosalliance.com/docs/php2shell-vulnerabilities-cve-2026-109618-cve-2026-109619Response evidence
  2. https://docs.telosalliance.com/docs/22xx-release-noteshttps://docs.telosalliance.com/docs/22xx-release-notesService and operation documentation
Related official sources
  1. PHP2Shell product advisoryOfficial notice
  2. Company and contracting entity informationOfficial information directory

Comments