Trust Center

Security Update: PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619

EZ Texting is aware of two recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, which could allow unauthenticated remote code execution on affected systems. Upon disclosure, our team evaluated all EZ Texting systems to identify any hosts running affected PHP versions. All affected hosts have been patched to the fixed releases. Logs were reviewed and determined that there were no signs of exploitation or indicators of compromise.

As an additional safeguard, we have DataDog monitoring in place for PHP processes across our environment, allowing us to detect and respond quickly to any anomalous activity. At this time, no action is required from our customers. We will continue to monitor the situation and will post further updates here if anything changes.