Security Advisory: Update on PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
We’re aware of two PHP vulnerabilities announced today (CVE-2026-109618 and CVE-2026-109619) and are actively responding.
What we’re doing
- Our engineering team is reviewing every part of the Vanillasoft platform that could be affected.
- Where PHP is in use, we’re applying the official patches as a priority.
What this means for you
- These vulnerabilities affect server-side systems.
- You and your users don’t need to take any action, and you can continue using Vanillasoft as normal.
Next steps
We’ll post an update here once our review is complete.
If you have questions in the meantime, please contact our customer support team.
Was this article helpful?
Thanks for the feedback. Glad we could help!
Sorry this article didn't give you the answer you were looking for. If you'd like to let us know what was missing, unclear, or anything else that could help us improve it, please share as much or as little detail as you'd like.
In case we need to clarify anything. All feedback is reviewed, whether or not you leave your email.
We read and investigate all feedback, using it to continuously improve our knowledge base.
Thank you for your feedback. If you need further assistance, please reach out to our support team.