Thank you all for your queries.
As stated in Netwrix Security Advisory ADV-2026-021, we have listed the status of the php2shell vulnerability for each Endpoint Protector version.
We understand that migration requires time and effort, especially in production environments. However, for all on-premises customers, the only supported way to remediate is to migrate to the latest 2608 image and keep the backend security fixes up to date. In addition to the php2shell fix, it contains a number of other security fixes and improvements delivered in previous versions, which are listed in the earlier Security Advisories.
For appliances running versions 2511-2604, TuxCare PHP provider has just released a hotfix that can be applied via the backend security updates. However, we still recommend migrating to 2608 to cover the other security issues. We recommend that customers plan and complete the migration as soon as possible.
Please also note that version 5.9.4.2 has already reached end of life and no longer receives security updates.
BR, Krzysiek