Core PHP Vulnerabilities CVE-2026-109618 & CVE-2026-109619 (PHP2Shell)
Last updateresolvedOct 21 · 18:00 UTC
The engineering and security teams have successfully concluded our proactive remediation and patching campaign addressing the recently disclosed core PHP runtime vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
Our multi-layered defense strategy was executed in the following phases to ensure absolute platform safety:
- Investigation: Immediately upon disclosure, our Product Security team made a quick inventory of all afflicted systems.
- Mitigation: We successfully deployed updated software configurations for mitigation based on suggestions by global security research teams.
- Patching: We have rolled out the official vendor security patches across all supporting internal infrastructure. All active runtime environments have been cycled.
We have detected no evidence of suspicious activity or exploitation attempts on our platform.
For a comprehensive breakdown of our official position, please review our formal executive response letter here: https://drive.google.com/file/d/1GSP7WCFodRYBr_SeR2fzdsIjDJH897mP/view?usp=sharing.
Reported by Lead Liaison on their status page.