Critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were identified in the PHP programming language on 21 October 2026. Following the disclosure of the vulnerabilities, we immediately took the necessary precautionary measures.
The necessary security updates have been implemented for Kiwa Impact to address the identified vulnerabilities.
Users of our services have been informed of the measures taken. The updates do not require any action from our customers or users of our services. We continue to monitor the situation and the security of our digital services.