Auvik incident
PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Resolved after 21 hours 26 minutes, affecting Auvik Website (www.auvik.com), on October 21, 2026.
We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP. We have completed our review of our broader environments and have addressed any other potential exposures. No further updates are expected.
Other major vendors with incidents that started within 30 minutes of this one
And 1 more: OpenAI.
Affected components
Update timeline
- identified Oct 21, 2026, 03:06 PM UTC
We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP We are reviewing our broader environments for potential exposure and will share updates as more information becomes available.
- resolved Oct 22, 2026, 12:33 PM UTC
We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP. We have completed our review of our broader environments and have addressed any other potential exposures. No further updates are expected.
Your product runs on more than Auvik
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services