Quadient Statement on Recently Disclosed PHP Security Vulnerabilities
Quadient has taken immediate action to address recently disclosed PHP security vulnerabilities, completing remediation across all identified impacted websites and confirming no evidence of unauthorised access or data compromise.
Quadient responded immediately to the recently disclosed PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Our technical teams promptly implemented the recommended mitigations while patches were made available, validated and deployed. All identified impacted websites across our products and services have now been remediated, and we continue to monitor our systems closely. Our investigation has found no evidence of unauthorised access, exploitation, or compromise of customer or partner data. For questions, please contact cybersecurity@quadient.com or your usual Quadient contact.
Related Content
Discover the latest articles, guides, case studies, and industry updates to help you stay ahead of changing customer expectations, emerging technologies, and market trends.

Quadient Named a Leader in the 2026 IDC MarketScape for Intelligent Customer Communication Management
Quadient has been named a Leader in the 2026 IDC MarketScape for Worldwide Intelligent Customer Communication Management, recognising its capabilities in modernising customer communications and delivering more connected customer experiences.

Quadient Expands Agentic AI to Accounts Receivable, Turning Customer Emails into Action
Quadient launches its AI-powered AR email agent to automate customer correspondence, reduce manual workloads and improve cash flow, while giving finance teams complete visibility and control.

Quadient Expands UK Locker Network Through Strategic Partnership with James Hall & Co. Ltd
Quadient partners with James Hall & Co. Ltd to expand its open locker network across SPAR stores in the North of England, with 37 locations already live.












