Rocket Open AppDev for Z is PHP getting updated to fix recent PHP2Shell security issue?

Hello,

The current Open AppDev for Z package contains PHP 8.3.23. An updated PHP 8.3.36 release, which includes fixes for CVE-2026-109618 and CVE-2026-109619, is currently being prepared for supported customers.

Open AppDev for Z packages are typically made publicly available six months after the corresponding customer release. Therefore, while PHP 8.3.36 is expected to be available to supported customers soon, the Open AppDev for Z publication would be expected to follow according to that standard timeline.

Thank you for your interest in Open AppDev for Z.