Identifi incident
Identifi Security Update: PHPShell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Ongoing since 07:38 PM UTC.
The infrastructure scan is still in progress. So far we have identified that none of the tools we use internally (backup, monitoring, CRM, etc.) are impacted by this vulnerability. We will provide our next update in 24 hours.
Update timeline
- monitoring Oct 22, 2026, 07:38 PM UTC
Identifi is aware of the recently disclosed PHPShell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and has been actively assessing their potential impact on our services. Our findings to date: Identifi platform: The core Identifi platform is not built on PHP and is not affected by these vulnerabilities. BeyondTrust Remote Support: The remote support platform we use for customer assistance is not affected by either vulnerability. OneSpan Sign: The electronic signature platform integrated into the Identifi application is not affected by either vulnerability. As an additional precaution, we are performing a comprehensive scan of our Azure-hosted infrastructure to identify any PHP-enabled resources and confirm that no supporting components are exposed. We will provide our next update within 24 hours.
- monitoring Oct 23, 2026, 01:43 PM UTC
The infrastructure scan is still in progress. So far we have identified that none of the tools we use internally (backup, monitoring, CRM, etc.) are impacted by this vulnerability. We will provide our next update in 24 hours.
Your product runs on more than Identifi
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services