iAdvize incident
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Resolved after 17 hours 57 minutes, on October 21, 2026.
Last night and this morning, we rolled out emergency updates to the services affected by the vulnerability. All updates went through successfully, and we’re monitoring the platform closely to make sure everything runs normally. On potential exploitation: we haven’t detected any suspicious activity.
Update timeline
- monitoring Oct 21, 2026, 02:08 PM UTC
PHP has announced security fixes for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, released on October 21. Our teams are currently reviewing the iAdvize platform. All services are operating normally.
- investigating Oct 21, 2026, 02:12 PM UTC
Our teams are currently reviewing the iAdvize platform.
- investigating Oct 21, 2026, 02:13 PM UTC
We are continuing to investigate this issue.
- identified Oct 21, 2026, 03:50 PM UTC
We are currently updating our applications with the security patches released by the PHP project: https://www.php.net/archive/2026.php#2026-10-21-5
- resolved Oct 22, 2026, 08:05 AM UTC
Last night and this morning, we rolled out emergency updates to the services affected by the vulnerability. All updates went through successfully, and we’re monitoring the platform closely to make sure everything runs normally. On potential exploitation: we haven’t detected any suspicious activity.
Your product runs on more than iAdvize
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services