Essentials MDM 5.42.3 and 5.42.4 with serious security fix for PHP vulnerability : Essentials MDM Support Center

Essentials MDM 5.42.3 and 5.42.4 with serious security fix for PHP vulnerability Print

Modified on: Thu, 22 Oct, 2026 at 5:57 PM

This hotfix is to address two very serious vulnerabilities (CVE-2026-109618 and CVE-2026-109619) found in PHP technology which is used in our MDM back-end.
The update of Techstep Essentials MDM to version 5.42.4 has been released and contains the official PHP update.

We highly recommend that you update to the latest version of the software as soon as possible.

In case the upgrade cannot be made at the moment in your environment, the security problems could be addressed by applying manually upgrade of the needed libs.

Here is the command that should be run from the command line (please ensure that the standard update procedure is followed and that a backup and snapshots are in place):

dnf makecache --refresh && dnf update -y php-* && systemctl restart php-fpm

For more details, see the following [PHP security advisory](https://www.php.net/archive/2026.php#2026-10-20-1).

Did you find it helpful? Yes No

How can we help you today?

Essentials MDM 5.42.3 and 5.42.4 with serious security fix for PHP vulnerability Print

Related Articles