We have released updated EMPS packages in Webuzo to address the security vulnerabilities CVE-2026-109618 and CVE-2026-109619.

We have launched PHP 7.4 to 8.5 with patches that fix the critical bugs in PHP. Even EMPS 5.6 has been updated to PHP 7.4 with the patches.

We recommend that all Webuzo users update EMPS and all PHP to ensure they receive the patched packages.

How to Update EMPS

To update EMPS to the patched version, execute the following command as the root user on your server:

/usr/local/emps/bin/php /usr/local/webuzo/cli.php --emps update

The command will initiate the EMPS update process and download the available patched packages.

Recommendation:

We strongly recommend running the update command as soon as possible to ensure your server has the latest available EMPS and PHP patches addressing these vulnerabilities.

For further assistance, please contact the Webuzo support team.