Identifi Security Update: PHPShell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Ongoing · last updatemonitoringOct 22 · 19:38 UTC
Identifi is aware of the recently disclosed PHPShell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and has been actively assessing their potential impact on our services. Our findings to date: Identifi platform: The core Identifi platform is not built on PHP and is not affected by these vulnerabilities. BeyondTrust Remote Support: The remote support platform we use for customer assistance is not affected by either vulnerability. OneSpan Sign: The electronic signature platform integrated into the Identifi application is not affected by either vulnerability. As an additional precaution, we are performing a comprehensive scan of our Azure-hosted infrastructure to identify any PHP-enabled resources and confirm that no supporting components are exposed. We will provide our next update within 24 hours.
Reported by Identifi on their status page.
