Keboola - PHP2Shell (CVE-2026-109618 and CVE-2026-109619) – Incident details

PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

Resolved
Degraded performance
Started 2 days ago
Updates
  • Resolved
    UTC
    Resolved

    We are aware of recently disclosed critical security vulnerabilities in PHP, known as "PHP2Shell".

    As soon as the vulnerabilities were published, we applied security measures and updated all affected components of the Keboola platform to patched versions. The vulnerabilities are fully mitigated on all stacks, and our review found no evidence of exploitation or data compromise.

    No action is needed on your side. If you have any questions, please contact our support.