PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

Incident Report for iAdvize (HA)

Identified

We are currently updating our applications with the security patches released by the PHP project: https://www.php.net/archive/2026.php#2026-10-21-5

Posted Oct 21, 2026 - 17:50 CEST

Update

We are continuing to investigate this issue.

Posted Oct 21, 2026 - 16:13 CEST

Investigating

Our teams are currently reviewing the iAdvize platform.

Posted Oct 21, 2026 - 16:12 CEST

Monitoring

PHP has announced security fixes for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, released on October 21. Our teams are currently reviewing the iAdvize platform.

All services are operating normally.

Posted Oct 21, 2026 - 16:08 CEST