Monta incident

Monta is not affected by PHP security vulnerabilities (CVE-2026-109618 / CVE-2026-109619)

Notice Ongoing View vendor source →

Monta is currently experiencing a notice incident affecting General availability, which began 7h ago. The vendor's full update timeline is below.

Started
Oct 21, 2026, 02:15 PM UTC
Resolved
Ongoing
Duration
● 7h 26m
Detected by Pingoru
Oct 21, 2026, 02:15 PM UTC

Affected components

General availability

Update timeline

  1. monitoring Oct 21, 2026, 02:15 PM UTC

    We are aware of the two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, also known as “php2shell”) that the PHP project disclosed and patched today, 21 October 2026. Our engineering and security teams have investigated, and we have confirmed that the Monta platform is not exposed to these vulnerabilities. Protective measures are already in place, and as a further precaution we are applying the latest security updates. The hosting provider for our public website, monta.com, has also confirmed that its systems are fully patched. No action is needed from customers or partners, and all Monta services are working normally. We will update this page once the precautionary updates are complete. If you have questions, contact us at [email protected].