Resolved -
Status: Informational - No ImpactOn October 21, 2026, two critical vulnerabilities affecting PHP were publicly disclosed (CVE-2026-109618 and CVE-2026-109619).Based on our review, BS&A Online is not impacted. BS&A Online does not run on PHP, which is the component affected by these vulnerabilities.Upon disclosure, our IT & Security team reviewed our hosting environment, network infrastructure and relevant third-party providers for any exposure, and took precautionary steps where warranted. We will continue to monitor and will update this notice if anything changes.No action is required on your part for BS&A Online. Questions can be directed to BS&A Support.
Oct 22, 09:00 EDT
