BSA Cloud incident
PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619) - No Impact to BS&A Cloud
Resolved on October 22, 2026.
On October 21, 2026, two critical vulnerabilities affecting PHP were publicly disclosed (CVE-2026-109618 and CVE-2026-109619).Based on our review, BS&A Cloud is not impacted. BS&A Cloud does not run on PHP, which is the component affected by these vulnerabilities. Upon disclosure, our IT & Security team reviewed our hosting environment, network infrastructure and relevant third-party providers for any exposure, and took precautionary steps where warranted. We will continue to monitor and will update this notice if anything changes. No action is required on your part for BS&A Cloud. Questions can be directed to BS&A Support.
Update timeline
- resolved Oct 22, 2026, 01:07 PM UTC
On October 21, 2026, two critical vulnerabilities affecting PHP were publicly disclosed (CVE-2026-109618 and CVE-2026-109619).Based on our review, BS&A Cloud is not impacted. BS&A Cloud does not run on PHP, which is the component affected by these vulnerabilities. Upon disclosure, our IT & Security team reviewed our hosting environment, network infrastructure and relevant third-party providers for any exposure, and took precautionary steps where warranted. We will continue to monitor and will update this notice if anything changes. No action is required on your part for BS&A Cloud. Questions can be directed to BS&A Support.
Your product runs on more than BSA Cloud
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services