Intric incident
Continuous monitoring of CVE-2026-109618 and CVE-2026-109619 fallout
Ongoing since 10:17 AM UTC.
Following the advisories for CVE-2026-109618 and CVE-2026-109619, we have assessed their impact on Intric. Intric's core platform is built with Python, Go and JavaScript (Node.js). It contains no PHP runtime and no PHP dependencies. Despite this, we reviewed Intric's application source code, dependency manifests and deployment configuration, and verified that no PHP runtime or PHP dependency is present in the material reviewed. Based on this assessment, we have identified no impact on Intric from these two vulnerabilities. No Intric-specific patch or mitigation is currently required, and customers do not need to take any action within Intric in response to them. Customers operating separate PHP-based systems should follow their software vendors' update guidance. Separately, we have deployed certificate-trust and security updates to our standard production backend and shared Python services. Runtime checks confirmed that the tested services reject known compromised certificate chains while continuing to accept valid secure connections. We have also updated and verified certificate trust on key infrastructure hosts.
Update timeline
- monitoring Oct 22, 2026, 10:17 AM UTC
Following the advisories for CVE-2026-109618 and CVE-2026-109619, we have assessed their impact on Intric. Intric's core platform is built with Python, Go and JavaScript (Node.js). It contains no PHP runtime and no PHP dependencies. Despite this, we reviewed Intric's application source code, dependency manifests and deployment configuration, and verified that no PHP runtime or PHP dependency is present in the material reviewed. Based on this assessment, we have identified no impact on Intric from these two vulnerabilities. No Intric-specific patch or mitigation is currently required, and customers do not need to take any action within Intric in response to them. Customers operating separate PHP-based systems should follow their software vendors' update guidance. Separately, we have deployed certificate-trust and security updates to our standard production backend and shared Python services. Runtime checks confirmed that the tested services reject known compromised certificate chains while continuing to accept valid secure connections. We have also updated and verified certificate trust on key infrastructure hosts.
Your product runs on more than Intric
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services