Back to overview
Resolved

PHP Vulnerabilities

Oct 21, 2026 at 3:51pm UTC  –  Oct 21, 2026 at 10:30pm UTC
Affected services
API (Production)
DoseSpot (Production)
Cronjob (Production)
Server Load
Server Memory
Server Storage
Processing Cases Queue
Webhooks Queue (Production)

Resolved
Oct 21, 2026 at 10:30pm UTC

Maintenance ended

Created
Oct 21, 2026 at 3:51pm UTC

We are aware of the recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, and are actively deploying the recommended security patches across our environment. Our teams are closely monitoring for any indicators of suspicious activity, and we currently have no evidence of impact to our systems. We expect remediation to be completed today, pending final validation. We will continue to keep partners informed of any material updates.