DRACOON incident
DRACOON is not affected by CVE-2026-109618 and CVE-2026-109619
Resolved on October 22, 2026.
We are aware of the recently published security vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP. DRACOON does not use PHP and is therefore not affected by these vulnerabilities. No action is required on your part. We continue to closely monitor security advisories and will keep you informed should this assessment change.
Update timeline
- resolved Oct 22, 2026, 11:12 AM UTC
We are aware of the recently published security vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP. DRACOON does not use PHP and is therefore not affected by these vulnerabilities. No action is required on your part. We continue to closely monitor security advisories and will keep you informed should this assessment change.
Your product runs on more than DRACOON
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services