JobAdder incident

PHP Vulnerability

Minor Vendor's status page →

Resolved on October 23, 2026, affecting AU1 and AU1 (AU1 — AU Data Centre) and 1 more.

resolved Oct 23, 2026, 03:05 AM UTC

We have completed the update to Smart Forms (FormAdder), resolving both PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). At this time, our review has found no evidence of unauthorised access to Smart Forms or customer data. If you have any questions, please get in touch.

Started
Oct 23, 2026, 03:05 AM UTC
Resolved
Oct 23, 2026, 03:05 AM UTC
Duration
–
Detected by Pingoru
Oct 23, 2026, 03:05 AM UTC

Affected components

AU1AU1 (AU1 — AU Data Centre)AU2AU2 (AU2 — AU Data Centre)AU3AU3 (AU3 — AU Data Centre)AU4AU4 (AU4 — AU Data Centre)AU5AU5 (AU5 — AU Data Centre)

Update timeline

  1. resolved Oct 23, 2026, 03:05 AM UTC

    We have completed the update to Smart Forms (FormAdder), resolving both PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). At this time, our review has found no evidence of unauthorised access to Smart Forms or customer data. If you have any questions, please get in touch.

Your product runs on more than JobAdder

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Cloudflare Amazon Web Services Twilio Stripe Slack Okta Figma GitHub Datadog Vercel OpenAI Google Cloud
Add your stack →