newsAmplified Not Affected by PHP Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Following the recent disclosure of critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), we would like to confirm that Amplified is not affected by these vulnerabilities.

Amplified does not use PHP in its application or service infrastructure. Therefore, these vulnerabilities do not affect our service, and no patches, service interruptions, or other remediation measures are required. Amplified continues to operate normally, and no action is required from our customers.

Amplified maintains an ISO 27001-certified Information Security Management System (ISMS), which includes ongoing vulnerability monitoring, risk assessment, and incident response procedures. We continuously monitor security developments and assess potential risks to our services. When security issues affecting Amplified are identified, we take appropriate action, including notifying customers when necessary.

Customers may reference this announcement as our official confirmation that Amplified is not affected by CVE-2026-109618 or CVE-2026-109619.

We remain committed to protecting our customers’ information and maintaining a secure, reliable service.