PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619) – Update
Last updateresolvedOct 22 · 09:24 UTC
Remediation of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 is complete for all internet-facing Productsup services. All affected services have been updated to patched PHP releases and restarted. Our investigation found no evidence that these vulnerabilities were exploited against our platform. We continue to monitor our systems. No customer action is required. This incident is now resolved.
Reported by Productsup on their status page.
