The PHP2Shell vulnerabilities allow RCE and leave user data vulnerable. With these exploits, attackers can manipulate application memory via a HashTable. This memory can then be reclaimed and controlled by the attacker.

The Mendix platform does not use PHP, and as such is not impacted by these vulnerabilities. Mendix applications and data are safe.

Any custom PHP extension, plug-in, or scripting should be reviewed by its respective owner and updated following PHP guidelines.