Amplience incident
PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Resolved after 8 days 20 hours, on October 22, 2026.
Our engineering and security teams have completed their assessment of the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Appropriate mitigations have been implemented to address the identified risks. We consider this matter resolved and will continue to monitor for any further developments.
Update timeline
- investigating Oct 22, 2026, 10:43 AM UTC
We are aware of the recently disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our engineering and security teams are actively investigating the potential impact on Amplience services and assessing whether any additional protective measures are required. We are treating this assessment as a priority and will provide further updates as appropriate.
- resolved Oct 31, 2026, 07:03 AM UTC
Our engineering and security teams have completed their assessment of the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Appropriate mitigations have been implemented to address the identified risks. We consider this matter resolved and will continue to monitor for any further developments.
Your product runs on more than Amplience
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services