Hi @JeremyG,
Thank you for raising this. As stated in Netwrix Security Advisory ADV-2026-021, we have listed the status of the php2shell vulnerability for each Endpoint Protector version.
We understand that migration requires time and effort, especially in production environments. However, for on-premises customers, the only supported way to remediate is to migrate to the latest 2608 image and keep the backend security fixes up to date. In addition to the php2shell fix, it contains a number of other security fixes and improvements delivered in previous versions, which are listed in the earlier Security Advisories.
We recommend that customers plan and complete the migration as soon as possible.
Please also note that version 5.9.4.2 and older has already reached end of life and no longer receives updates.
If you need help with the migration, please contact Netwrix Support.
BR,
Krzysiek