Applaud is not affected by the PHP vulnerabilities (CVE-2026-109618 or CVE-2026-109619). Applaud doesn't use PHP, so customer data, integrations, and service availability are unaffected, and customers don't need to do anything.
What happened
On 21 October 2026, security researchers disclosed two critical vulnerabilities in the PHP programming language, widely reported as "php2shell". PHP powers many websites.
Is Applaud affected?
No. The vulnerabilities affect PHP specifically, and the Applaud platform doesn't use PHP.
To confirm this, our operations team reviewed:
- Our application architecture
- Our supporting infrastructure
- Security scan results across our AWS environments
We found no exposure to either vulnerability. We also reviewed the relevant AWS security guidance, which confirms that AWS services themselves are not affected.
What this means for you
- There is no impact on your data, integrations, or service availability.
- There is nothing you need to change in Applaud.
Questions
If you have any questions about this assessment, contact Applaud Support.