Mosio incident
PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Resolved on October 21, 2026.
On October 21, 2026, the PHP project disclosed two critical vulnerabilities affecting web servers that run PHP. We applied the security fix to the Mosio platform within a day of its release, together with the recommended security hardening, and all Mosio production traffic is served by patched servers. We have found no evidence that our systems were affected, and no action is needed from customers.
Update timeline
- resolved Oct 22, 2026, 02:43 PM UTC
On October 21, 2026, the PHP project disclosed two critical vulnerabilities affecting web servers that run PHP. We applied the security fix to the Mosio platform within a day of its release, together with the recommended security hardening, and all Mosio production traffic is served by patched servers. We have found no evidence that our systems were affected, and no action is needed from customers.
Your product runs on more than Mosio
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services