# Amplitude: Notice: Amplitude not impacted by recent PHP vulnerabilities

> Amplitude status incident “Notice: Amplitude not impacted by recent PHP vulnerabilities” on 2026-10-22: impact none (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/amplitude/incidents/1nhs3z82vtvl
Last updated: 2026-10-26T04:06:50Z

- Impact (vendor’s label): none
- Status: resolved
- Started: 2026-10-22 19:25 UTC · Resolved: 2026-10-22 19:25 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://status.amplitude.com/incidents/1nhs3z82vtvl](https://status.amplitude.com/incidents/1nhs3z82vtvl)
- [Company: Amplitude](https://rewindex.com/company/amplitude.md)

## CVEs mentioned

- [CVE-2026-109618](https://rewindex.com/cve/CVE-2026-109618.md) RCE via OOM corruption (CVSS 9.8 critical): says not affected (“not impacted”)
- [CVE-2026-109619](https://rewindex.com/cve/CVE-2026-109619.md) RCE via stale global state (CVSS 8.1 high): says not affected (“not impacted”)

_Only CVEs the incident text names by id, or that the notice says the vendor is not affected by. Not a statement of cause._

## Timeline of updates

- **resolved** 2026-10-22 19:25 UTC: Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation. No customer action is required at this time. As this is a developing advisory, any further updates will be communicated appropriately via our Trust Center at https://trust.amplitude.com/updates?tab=updates&update=65d46972-f7ed-4f53-bccf-f86f1d18393e. Please subscribe to our Trust Center for notification on updates as no further updates will be made on our Statuspage here.


---
Canonical: https://rewindex.com/company/amplitude/incidents/1nhs3z82vtvl · Markdown: https://rewindex.com/company/amplitude/incidents/1nhs3z82vtvl.md · JSON: https://rewindex.com/api/v1/companies/amplitude/incidents/1nhs3z82vtvl · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T04:06:50.171Z