Following the recent global disclosures regarding critical vulnerabilities in the PHP core (CVE-2026-109618 / CVE-2026-109619 | PHP2Shell), our infrastructure team has conducted a comprehensive security review and proactive patching across all environments.
We can confirm that all production servers, database clusters, and underlying runtime environments across our entire infrastructure were fully patched and secured on October 21, within hours of the official security release.
All platform services continue to operate normally with zero disruption, and all hosted data remains fully protected.
The platform is completely secure, and no action is required by any users or customers.
Urgent Notice for Self-Hosted Customers:
If you run our software on your own infrastructure or dedicated servers, we strongly urge you to patch your server environments immediately. The underlying vulnerabilities affect PHP at the core runtime level across multiple versions. Please update your host PHP packages to the latest patched releases (8.5.12, 8.4.27, 8.3.36, 8.2.35, or your OS vendor's security backports) without delay.
