Riva Security Advisory Regarding Recent PHP Vulnerabilities

David Legault
David Legault
  • Updated

Riva Security Advisory Regarding Recent PHP Vulnerabilities
October 22, 2026

Riva is aware of the recent critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which may allow unauthenticated remote code execution on affected PHP web-server deployments.

Riva has reviewed the issue and confirmed that Riva Cloud services and Riva product components are not impacted by these PHP vulnerabilities. The affected PHP runtime and web-request processing paths are not used by the Riva services covered by this advisory.

No action is required from Riva customers.

Riva will continue to monitor relevant security advisories and assess any future information that could affect our products or services. Customers with questions may contact Riva Support through their usual support channel.