Civitas Learning incident
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Resolved on October 21, 2026.
Civitas Learning has assessed CVE-2026-109618 and CVE-2026-109619, which affect PHP web runtimes. Our services include PHP-based web components that were potentially affected. Civitas Learning applied remediation on October 21, 2026, and the vulnerabilities are no longer present in our environment. We have identified no indicators of exposure, compromise, or abuse related to these vulnerabilities, and no customer action is required. If you have any additional questions please email [email protected].
Update timeline
- resolved Oct 23, 2026, 06:42 PM UTC
Civitas Learning has assessed CVE-2026-109618 and CVE-2026-109619, which affect PHP web runtimes. Our services include PHP-based web components that were potentially affected. Civitas Learning applied remediation on October 21, 2026, and the vulnerabilities are no longer present in our environment. We have identified no indicators of exposure, compromise, or abuse related to these vulnerabilities, and no customer action is required. If you have any additional questions please email [email protected].
Your product runs on more than Civitas Learning
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services