iAdvize incident
PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
iAdvize is currently experiencing a notice incident, which began 6h ago. The vendor's full update timeline is below.
Update timeline
- monitoring Oct 21, 2026, 02:08 PM UTC
PHP has announced security fixes for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, released on October 21. Our teams are currently reviewing the iAdvize platform. All services are operating normally.
- investigating Oct 21, 2026, 02:12 PM UTC
Our teams are currently reviewing the iAdvize platform.
- investigating Oct 21, 2026, 02:13 PM UTC
We are continuing to investigate this issue.
- identified Oct 21, 2026, 03:50 PM UTC
We are currently updating our applications with the security patches released by the PHP project: https://www.php.net/archive/2026.php#2026-10-21-5