Security update: PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

Next

Overview

Two critical vulnerabilities in PHP, an open-source programming language many websites and web applications run on, were disclosed October 21, 2026. Some 8x8 interfaces use PHP, and we are applying a protective configuration change to them now.

Further information about this can be found in the 8x8 blog.