PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Incident Report for Auvik Networks Inc.

Identified

We are aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619.

THE AUVIK PRODUCT DOES NOT DIRECTLY USE PHP

We are reviewing our broader environments for potential exposure and will share updates as more information becomes available.

Posted Oct 21, 2026 - 11:06 EDT

This incident affects: Auvik Website (www.auvik.com).