Is ThoughtFarmer affected by CVE-2026-109618 or CVE-2026-109619 (PHP)?

Summary

ThoughtFarmer is not affected by CVE-2026-109618 or CVE-2026-109619. These vulnerabilities are in PHP. ThoughtFarmer does not use PHP, and PHP is not part of the ThoughtFarmer application or our hosting environment.

ThoughtFarmer Cloud customers

No action is needed.

Self-hosted customers

ThoughtFarmer does not install or require PHP. If your organization has installed PHP on the same server for another application, follow your own patching process for that software. It has no effect on ThoughtFarmer.

Questions?

If you have further questions, please create a Helpdesk ticket.