Incidentsby Ibis
Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Oct 21, 18:22 UTCOct 21, 18:22 UTC
Duration
0m
Impact
Informational
Root cause
Not disclosed
Cloudinary, 90 days
6 incidents
Affected
Not listed by the vendor.
Final update
Regarding the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 Cloudinary’s core platform, including its upload, transformation, and delivery APIs and Console, does not use PHP and is not affected by these vulnerabilities. Please note that customers who use the Cloudinary PHP SDK in their own applications should update PHP in their respective environments
Timeline
- Resolved · Oct 21, 18:22 UTC
Regarding the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 Cloudinary’s core platform, including its upload, transformation, and delivery APIs and Console, does not use PHP and is not affected by these vulnerabilities. Please note that customers who use the Cloudinary PHP SDK in their own applications should update PHP in their respective environments
More from Cloudinary
Full historyIssues accessing the Cloudinary web UIlasted 1h 47mUsage reports unavailable in Console Dashboardlasted 0mIncreased Error Rates – EU Regionlasted 4h 35mMedia Library / asset visibilitylasted 24h 41mAdd-on installations are unavailablelasted 1h 22mConnection failures with the Cloudinary MCP Connectorlasted 12h 16m