Quadient Statement on Recently Disclosed PHP Security Vulnerabilities

Quadient has taken immediate action to address recently disclosed PHP security vulnerabilities, completing remediation across all identified impacted websites and confirming no evidence of unauthorized access or data compromise.

Share this page:

Quadient responded immediately to the recently disclosed PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our technical teams promptly implemented the recommended mitigations while patches were made available, validated and deployed. All identified impacted websites across our products and services have now been remediated, and we continue to monitor our systems closely. Our investigation has found no evidence of unauthorized access, exploitation, or compromise of customer or partner data. For questions, please contact cybersecurity@quadient.com or your usual Quadient contact.