No impact incident

Auvik Networks: PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Affected: Auvik Website (www.auvik.com)

Current status of Auvik Networks: Operational — live Auvik Networks status

Timeline

1. Oct 21, 2026, 15:06 UTC
   identified
   We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP We are reviewing our broader environments for potential exposure and will share updates as more information becomes available.
2. Oct 22, 2026, 12:33 UTC
   resolved
   We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP. We have completed our review of our broader environments and have addressed any other potential exposures. No further updates are expected.

Updates as published by Auvik Networks (original).