IDNow incident
Security Information - no impact on IDnow services - PHP2Shell (CVE-2026-109618, CVE-2026-109619)
Ongoing since 01:17 PM UTC, affecting Ident Center Munich and VideoIdent and 1 more.
Dear customers, On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions. IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently. If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Affected components
Update timeline
- monitoring Oct 23, 2026, 01:17 PM UTC
Dear customers, On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions. IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently. If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Your product runs on more than IDNow
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services