This release contains a security update for a third-party component. All other components remain unchanged from Release 964.
PHP Security Update
The PHP project recently disclosed two critical vulnerabilities in PHP 7.4, CVE-2026-109618 and CVE-2026-109619 (known as “PHP2Shell”). PHP is a third-party runtime that the Teramind web server image uses on self-hosted deployments. This release updates the image to the patched PHP 7.4 packages.
Teramind’s features and behavior are unchanged. After you install this update, vulnerability scans of the web server will no longer report these CVEs. We recommend that all on-premises customers update to TMU 971 as soon as possible.
See this article to learn how to update your server.