Update on the PHP programming language (CVE-2026-109618 and CVE-2026-109619) remote code execution security vulnerabilities.
We’ve been following this closely since the first details went public on Tuesday evening.
As more information came out, we added protections at the firewall level to block any attempts to exploit the vulnerability. When the official fixes were released on Wednesday, we installed them across all our systems right away.
We’ve seen no signs of the vulnerability being exploited in our systems. You don’t need to do anything.
We’re keeping a close eye on the situation and will share an update if anything changes. Questions? Reach us via our support page.