Guidewire incident
Investigation of PHP Vulnerability CVE-2026-109618 and CVE-2026-109619
Ongoing since 03:42 AM UTC, affecting Montréal and N. Virginia and 1 more.
Guidewire is aware of the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP that were made public on October 21, 2026. Investigation of impact is currently in progress. We will provide customers with additional updates and guidance as our investigation continues. Guidewire is handling these issues with the utmost priority. We currently have no evidence of any compromise of our systems or customer data.
Affected components
Update timeline
- investigating Oct 23, 2026, 03:42 AM UTC
Guidewire is aware of the recently disclosed vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP that were made public on October 21, 2026. Investigation of impact is currently in progress. We will provide customers with additional updates and guidance as our investigation continues. Guidewire is handling these issues with the utmost priority. We currently have no evidence of any compromise of our systems or customer data.
Your product runs on more than Guidewire
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services