Simply.com incident
We are aware of two security vulnerabilities affecting PHP, identified as `CVE-2026-109618` and `CVE-2026-109619`.
Resolved after 9 hours 39 minutes, affecting Servers and services, on October 21, 2026.
We are aware of two security vulnerabilities affecting PHP, identified as `CVE-2026-109618` and `CVE-2026-109619`. We have mitigated the vulnerabilities on our servers. No action is required as a customer. We do however always encourage our customers to run PHP versions that are maintained. (PHP 8.2+)
Affected components
Update timeline
- investigating Oct 21, 2026, 07:00 AM UTC
We are aware of two security vulnerabilities affecting PHP, identified as `CVE-2026-109618` and `CVE-2026-109619`. We have mitigated the vulnerabilities on our servers. No action is required as a customer. We do however always encourage our customers to run PHP versions that are maintained. (PHP 8.2+)
Your product runs on more than Simply.com
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services