The European Fencing Confederation (EFC) has issued an important security advisory to all Member Federations following the recent disclosure of two vulnerabilities affecting PHP, a widely used programming language that powers websites and online services around the world.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, are collectively known as “PHP2Shell”and may pose security risks to websites and other digital platforms operated by national fencing federations.
Recommended Security Measures
In Information Letter No. 36-2026, EFC President Pascal Tesch encourages all Member Federations to take precautionary measures to protect their digital infrastructure.
The EFC recommends that federations contact their web hosting or service providers to confirm that the relevant security patches have been applied. Federations are also advised to verify which PHP version their websites currently use and ensure that it has been updated to the latest patched release.
Additionally, all content management systems, plugins and other website dependencies should be kept up to date to minimise potential security risks.
Strengthening Digital Security Across European Fencing
As digital platforms continue to play an essential role in communication, competition management and the daily operations of fencing organisations, maintaining secure and reliable online systems remains an important priority.
The European Fencing Confederation reminds its Member Federations that regular software updates are among the most effective measures for protecting the security and integrity of their digital infrastructure.
All Member Federations are encouraged to review their website security and consult their technical service providers to ensure that appropriate protective measures are in place.
