Last night and this morning, we rolled out emergency updates to the services affected by the vulnerability. All updates went through successfully, and we’re monitoring the platform closely to make sure everything runs normally. On potential exploitation: we haven’t detected any suspicious activity.

We are currently updating our applications with the security patches released by the PHP project: https://www.php.net/archive/2026.php#2026-10-21-5

We are continuing to investigate this issue.

Our teams are currently reviewing the iAdvize platform.

PHP has announced security fixes for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, released on October 21. Our teams are currently reviewing the iAdvize platform. All services are operating normally.