LiquidFiles does not use PHP — it's a Ruby on Rails application, with no PHP interpreter or PHP-based component anywhere on the appliance. Since CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell") only affect the PHP interpreter itself, there is no code path by which either applies to LiquidFiles, on any version, including your current 4.3.1. No update or action is needed on your side, and there's no reason to shut anything down on account of these. https://docs.liquidfiles.com/security/cve/CVE-2026-109618.html
