No impact incident

Cloudinary: Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

Oct 21, 2026, 18:22 UTC
started
18:22 UTC
resolved
<1 min
duration

Current status of Cloudinary: Operational — live Cloudinary status

Timeline

  1. Oct 21, 2026, 18:22 UTC
    resolved
    Regarding the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 Cloudinary’s core platform, including its upload, transformation, and delivery APIs and Console, does not use PHP and is not affected by these vulnerabilities. Please note that customers who use the Cloudinary PHP SDK in their own applications should update PHP in their respective environments

Updates as published by Cloudinary (original).

Other services with incidents at the same time

More Cloudinary incidents