No impact incident

iAdvize (HA): PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

Current status of iAdvize (HA): Operational — live iAdvize (HA) status

Timeline

1. Oct 21, 2026, 14:08 UTC
   monitoring
   PHP has announced security fixes for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, released on October 21. Our teams are currently reviewing the iAdvize platform. All services are operating normally.
2. Oct 21, 2026, 14:12 UTC
   investigating
   Our teams are currently reviewing the iAdvize platform.
3. Oct 21, 2026, 14:13 UTC
   investigating
   We are continuing to investigate this issue.
4. Oct 21, 2026, 15:50 UTC
   identified
   We are currently updating our applications with the security patches released by the PHP project: https://www.php.net/archive/2026.php#2026-10-21-5
5. Oct 22, 2026, 08:05 UTC
   resolved
   Last night and this morning, we rolled out emergency updates to the services affected by the vulnerability. All updates went through successfully, and we’re monitoring the platform closely to make sure everything runs normally. On potential exploitation: we haven’t detected any suspicious activity.

Updates as published by iAdvize (HA) (original).