Security Advisory: Current PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

As of October 22, 2026

On October 21, 2026, two critical security vulnerabilities in PHP were disclosed. Under certain circumstances, they could allow malicious code to be executed on affected systems.

Based on our current assessment, awork is not affected by these vulnerabilities.

PHP is not used in our application or in the infrastructure components we are responsible for.

For you, this means:

• These vulnerabilities do not directly affect the secure use of awork.
• No additional steps or security updates are required to use awork.

As part of our established security processes, we continue to monitor the security landscape and relevant advisories about the services we use.

If new information changes our assessment, we'll let you know.

If you have any questions, feel free to contact our support team or email us at security@awork.com