On 21 October 2026, two critical PHP vulnerabilities were disclosed (CVE-2026-109618 and CVE-2026-109619).
PHP is one of several technologies used within the Silktide platform. We responded immediately to the disclosure, deploying the latest security patches to the relevant systems as soon as they became available.
All updates to our core production environments were completed on 21 October 2026. We have found no evidence of either vulnerability being exploited within Silktide's environments.
We continue to monitor our infrastructure closely, and no action is required from our customers.