RedSky incident
Security Bulletin: PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
Ongoing since 02:46 PM UTC.
Everbridge has been assessing and remediating exposure to the recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, across its products and supporting environments. Based on our assessment to date, the main applications for Everbridge CEM, xMatters, Infinite Blue, RedSky and Anvil are not affected by these vulnerabilities. Our review identified affected marketing websites, third party components and internal tools. All affected instances identified to date have been remediated. We continue to monitor developments and review the remaining products and supporting components for potential exposure and any additional remediation needs.
Update timeline
- monitoring Oct 22, 2026, 02:46 PM UTC
Everbridge has been assessing and remediating exposure to the recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, across its products and supporting environments. Based on our assessment to date, the main applications for Everbridge CEM, xMatters, Infinite Blue, RedSky and Anvil are not affected by these vulnerabilities. Our review identified affected marketing websites, third party components and internal tools. All affected instances identified to date have been remediated. We continue to monitor developments and review the remaining products and supporting components for potential exposure and any additional remediation needs.
Your product runs on more than RedSky
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services