--- title: "Security Advisory: PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619" description: Learn how Intranet Connections managed cloud hosting is unaffected by PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, with no action required. --- [Skip to content](https://learn.intranetconnections.com/securityproductupdates#main-content) ![New White Logo-1](https://learn.intranetconnections.com/hs-fs/hubfs/New%20White%20Logo-1.png?width=200&height=58&name=New%20White%20Logo-1.png) Open main navigation Close main navigation - [Contact Support](mailto:support@intranetconnections.com) [Contact Support](mailto:support@intranetconnections.com) How can we help you? - There are no suggestions because the search field is empty. 1. [IC Knowledge Hub](https://learn.intranetconnections.com/?hsLang=en-ca) 2. [Security](https://learn.intranetconnections.com/security?hsLang=en-ca) 3. [Security News & Updates](https://learn.intranetconnections.com/security?hsLang=en-ca#security-news-updates) # Security Advisory: PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 ## Following an internal review of the hosting infrastructure, application architecture, and supporting services, we have confirmed that IC 3.0 managed cloud environments are not affected by either vulnerability. **Product:** Intranet Connections 3.0 (IC 3.0) **Environment:** IC 3.0 Managed Cloud Hosting **Security Status:** Not Affected **Vulnerability Disclosure Date:** October 21, 2026 Intranet Connections has reviewed two recently disclosed PHP security vulnerabilities, **CVE-2026-109618** and **CVE-2026-109619**, to determine whether they impact customers using IC 3.0 in our managed cloud hosting environment. Following an internal review of the hosting infrastructure, application architecture, and supporting services, we have confirmed that **IC 3.0 managed cloud environments are not affected by either vulnerability.** #### **Does Intranet Connections 3.0 Use PHP?** No. Intranet Connections 3.0 does not use PHP. IC 3.0 is built using Microsoft .NET technologies and operates within the following infrastructure: - **Application Framework:** Microsoft .NET - **Web Server:** Microsoft Internet Information Services (IIS) - **Operating System:** Microsoft Windows Server - **Cloud Infrastructure:** Microsoft Azure - **Databases:** Microsoft SQL Server and PostgreSQL PHP is not installed or used within our managed IC 3.0 hosting environment, including supporting services, third-party components, or underlying infrastructure. #### **Have These Vulnerabilities Been Evaluated?** Yes. Following the October 21, 2026 disclosure, our team reviewed the servers and services supporting the IC 3.0 managed hosting environment. The review confirmed that no PHP runtime is present within the hosted infrastructure. Because both vulnerabilities affect the PHP interpreter, systems that do not run PHP are not susceptible to these specific vulnerabilities. #### **Are Hosted IC 3.0 Customers Affected?** **No. Customers using IC 3.0 in our managed cloud hosting environment are not affected by CVE-2026-109618 or CVE-2026-109619.** Neither vulnerability applies to the technologies used to operate the hosted IC 3.0 application. #### **Are Security Patches or Customer Actions Required?** No PHP-specific patches or remediation activities are required because no affected components were identified. Our managed hosting environments continue to receive regular Windows and .NET security updates as part of our standard infrastructure maintenance and security practices. **No action is required from IC 3.0 managed cloud customers regarding these two vulnerabilities.** #### **Does This Advisory Apply to Self-Hosted Environments?** This assessment specifically covers **Intranet Connections 3.0 environments managed and hosted by Intranet Connections**. Customers operating self-hosted infrastructure should consult their internal IT or security teams to evaluate any independently managed systems or services that may use PHP. | Security Assessment | Findings | | --- | --- | | CVE-2026-109618 | Not affected | | CVE-2026-109619 | Not affected | | PHP used by hosted IC 3.0 | No | | Vulnerability assessment completed | Yes | | Affected components identified | None | | PHP security patches required | No | | Customer action required | None | --- #### Additional Questions or Security Documentation If your organization's IT or security team requires further clarification or supporting information for a vendor security assessment, please contact **Intranet Connections Support**. Our team is happy to assist with security-related inquiries concerning your IC 3.0 environment. - [FAQs](https://learn.intranetconnections.com/faqs?hsLang=en-ca#main-content) - [AI](https://learn.intranetconnections.com/faqs?hsLang=en-ca#ai) - [Onboarding & Setup](https://learn.intranetconnections.com/onboarding-setup?hsLang=en-ca#main-content) - [Migration](https://learn.intranetconnections.com/onboarding-setup?hsLang=en-ca#migration) - [Theme & Design](https://learn.intranetconnections.com/onboarding-setup?hsLang=en-ca#theme-design) - [Installation](https://learn.intranetconnections.com/onboarding-setup?hsLang=en-ca#installation) - [Product News](https://learn.intranetconnections.com/product-news?hsLang=en-ca#main-content) - [Release Notes](https://learn.intranetconnections.com/product-news?hsLang=en-ca#release-notes) - [Product Patches](https://learn.intranetconnections.com/product-news?hsLang=en-ca#product-patches) - [Reports](https://learn.intranetconnections.com/reports?hsLang=en-ca#main-content) - [Intranet Analytics](https://learn.intranetconnections.com/reports?hsLang=en-ca#intranet-analytics) - [Integrations](https://learn.intranetconnections.com/integrations?hsLang=en-ca#main-content) - [SharePoint](https://learn.intranetconnections.com/integrations?hsLang=en-ca#sharepoint) - [AI](https://learn.intranetconnections.com/integrations?hsLang=en-ca#ai) - [Support](https://learn.intranetconnections.com/support?hsLang=en-ca) - [Technical Setup & Configuration](https://learn.intranetconnections.com/technical-setup-configuration?hsLang=en-ca#main-content) - [Intranet Settings](https://learn.intranetconnections.com/technical-setup-configuration?hsLang=en-ca#intranet-settings) - [Disaster Recovery](https://learn.intranetconnections.com/technical-setup-configuration?hsLang=en-ca#disaster-recovery) - [Advanced Configuration](https://learn.intranetconnections.com/technical-setup-configuration?hsLang=en-ca#advanced-configuration) - [How To's](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#main-content) - [Multilingual](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#multilingual) - [Navigation](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#navigation) - [Intranet Architecture](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#intranet-architecture) - [Security & Permissions](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#security-permissions) - [Private Cloud](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#private-cloud) - [Feature Requests](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#feature-requests) - [Forms & Workflows](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#forms-workflows) - [Your Guide to Transitioning to IC 3.0](https://learn.intranetconnections.com/how-tos?hsLang=en-ca#your-guide-to-transitioning-to-ic-3-0) - [Best Practices](https://learn.intranetconnections.com/best-practices?hsLang=en-ca#main-content) - [Design](https://learn.intranetconnections.com/best-practices?hsLang=en-ca#design) - [Getting Started](https://learn.intranetconnections.com/best-practices?hsLang=en-ca#getting-started) - [Applications](https://learn.intranetconnections.com/applications?hsLang=en-ca#main-content) - [Documents](https://learn.intranetconnections.com/applications?hsLang=en-ca#documents) - [Internal Resources](https://learn.intranetconnections.com/applications?hsLang=en-ca#internal-resources) - [Announcements](https://learn.intranetconnections.com/applications?hsLang=en-ca#announcements) - [Engagement](https://learn.intranetconnections.com/applications?hsLang=en-ca#engagement) - [Advertising](https://learn.intranetconnections.com/applications?hsLang=en-ca#advertising) - [Account & Support](https://learn.intranetconnections.com/account-support?hsLang=en-ca#main-content) - [Our Services](https://learn.intranetconnections.com/account-support?hsLang=en-ca#our-services) - [Security](https://learn.intranetconnections.com/security?hsLang=en-ca#main-content) - [Security News & Updates](https://learn.intranetconnections.com/security?hsLang=en-ca#security-news-updates) - [Widgets](https://learn.intranetconnections.com/widgets?hsLang=en-ca#main-content) - [What's New Feed](https://learn.intranetconnections.com/widgets?hsLang=en-ca#whats-new-feed) - [Content & Media Widgets](https://learn.intranetconnections.com/widgets?hsLang=en-ca#content-media-widgets) - [Engagement Widgets](https://learn.intranetconnections.com/widgets?hsLang=en-ca#engagement-widgets) [![ic-chatbot-logo](https://learn.intranetconnections.com/hs-fs/hubfs/Logos%20and%20Icons/ic-chatbot-logo.png?width=100&height=100&name=ic-chatbot-logo.png "ic-chatbot-logo")](https://intranetconnections.com) Copyright © 2025, Intranet Connections