Quick Base incident
[Quickbase Status] Notice: PHP Vulnerability (Informational)
Resolved on October 22, 2026, affecting Quickbase Audit Logs - EU Region and Quickbase Webhooks - EU Region and 1 more.
Regarding the recently reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (known as PHP2Shell), Quickbase products or services used by customers are not impacted by these vulnerabilities. On October 21, 2026, PHP released fixes for two critical remote code execution vulnerabilities. We reviewed our environment as soon as they were published. Quickbase platform and products: We do not use PHP in the Quickbase platform or products. These vulnerabilities do not affect them. Customer data: We found no impact to customer data or to the services customers use. Internal systems: We found one legacy internal service that uses PHP. It supports our marketing operations It is not reachable from the Internet. It does not store or process customer data. We are updating it to a fixed PHP version. Monitoring: We reviewed our systems and found no sign of compromise. We continue to monitor.
Affected components
Update timeline
- investigating Oct 22, 2026, 03:00 PM UTC
Regarding the recently reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (known as PHP2Shell), Quickbase products or services used by customers are not impacted by these vulnerabilities. On October 21, 2026, PHP released fixes for two critical remote code execution vulnerabilities. We reviewed our environment as soon as they were published. Quickbase platform and products: We do not use PHP in the Quickbase platform or products. These vulnerabilities do not affect them. Customer data: We found no impact to customer data or to the services customers use. Internal systems: We found one legacy internal service that uses PHP. It supports our marketing operations It is not reachable from the Internet. It does not store or process customer data. We are updating it to a fixed PHP version. Monitoring: We reviewed our systems and found no sign of compromise. We continue to monitor.
Your product runs on more than Quick Base
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services