Dhosting PL incident
CVE-2026-109618 & CVE-2026-109619 Mitigation on dPoczta.pl
Resolved after 2 hours 24 minutes, affecting section-238879 (Webmail), on October 21, 2026.
All components affected by the vulnerabilities have been correctly updated, and the parameters have been restored to their previous values.
Affected components
Update timeline
- investigating Oct 21, 2026, 02:12 PM UTC
In response to CVE-2026-109618 and CVE-2026-109619, we have implemented limits on attachment sizes on dPoczta.pl. Once our systems have been updated, these limits will be restored to their previous values; we are currently awaiting patches for these vulnerabilities from the software vendors. We apologize for any inconvenience.
- resolved Oct 21, 2026, 04:36 PM UTC
All components affected by the vulnerabilities have been correctly updated, and the parameters have been restored to their previous values.
Your product runs on more than Dhosting PL
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services