Issues Resolved in 8.4.3615 (Security Patch 4)

The table below lists the issue resolved in fix version 8.4.3615 for Security Patch #4, see Operating System Security Patch Updates.

Incident Index

Incident Description

Device Manager

DM-2957

PHP2Shell Vulnerabilities addressed including updated PHP RPM packages: CVE-2026-109618 and CVE-2026-109619. These vulnerabilities could allow remote code execution in affected PHP installations. The fix updates the underlying PHP packages; no Device Manager application-code or user-interface changes are included.