8x8 incident
Security update: PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Ongoing since 08:16 PM UTC, affecting Americas and EMEA and 1 more.
8x8 has recently become aware of a new security vulnerability. Two critical vulnerabilities in PHP, an open-source programming language many websites and web applications run on, were disclosed October 21, 2026. Some 8x8 interfaces use PHP, and we are applying a protective configuration change to them now. Please follow this blog post to better understand how 8x8 is responding. https://www.8x8.com/blog/php-vulnerability-response
Affected components
Update timeline
- investigating Oct 21, 2026, 08:16 PM UTC
8x8 has recently become aware of a new security vulnerability. Two critical vulnerabilities in PHP, an open-source programming language many websites and web applications run on, were disclosed October 21, 2026. Some 8x8 interfaces use PHP, and we are applying a protective configuration change to them now. Please follow this blog post to better understand how 8x8 is responding. https://www.8x8.com/blog/php-vulnerability-response
Your product runs on more than 8x8
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services