Security advisory: PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

1Kosmos has assessed the critical PHP vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619, which may allow unauthenticated remote code execution in affected environments.

Our assessment found that 1Kosmos products and services are not affected by these vulnerabilities. No customer or partner action is required.

1Kosmos continuously monitors security advisories relevant to our technology stack and evaluates their potential impact on our environment and services.

For questions or additional information, contact your 1Kosmos representative.