PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

Incident Report for iAdvize (HA)

Resolved

Last night and this morning, we rolled out emergency updates to the services affected by the vulnerability.
All updates went through successfully, and we’re monitoring the platform closely to make sure everything runs normally.

On potential exploitation: we haven’t detected any suspicious activity.
Posted Oct 22, 2026 - 10:05 CEST

Identified

We are currently updating our applications with the security patches released by the PHP project: https://www.php.net/archive/2026.php#2026-10-21-5
Posted Oct 21, 2026 - 17:50 CEST

Update

We are continuing to investigate this issue.
Posted Oct 21, 2026 - 16:13 CEST

Investigating

Our teams are currently reviewing the iAdvize platform.
Posted Oct 21, 2026 - 16:12 CEST

Monitoring

PHP has announced security fixes for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, released on October 21. Our teams are currently reviewing the iAdvize platform.

All services are operating normally.
Posted Oct 21, 2026 - 16:08 CEST
← Current Status Powered by Atlassian Statuspage