PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Last updateresolvedOct 21 · 15:00 UTC
On October 21, 2026, the PHP project disclosed two critical vulnerabilities affecting web servers that run PHP. We applied the security fix to the Mosio platform within a day of its release, together with the recommended security hardening, and all Mosio production traffic is served by patched servers. We have found no evidence that our systems were affected, and no action is needed from customers.
Reported by Mosio on their status page.
