Provider
CloudinaryIncident detail
Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Resolved incidentMinor
Timeline window
to
Get alerted the next time Cloudinary breaks
Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.
Timeline
Incident updates
Every update on the official status source, oldest to newest, exactly as it appeared there.
Resolved
Regarding the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Cloudinary’s core platform, including its upload, transformation, and delivery APIs and Console, does not use PHP and is not affected by these vulnerabilities.
Please note that customers who use the Cloudinary PHP SDK in their own applications should update PHP in their respective environments
Keep exploring
More from Cloudinary
Neighboring incidents on Cloudinary's timeline and the rest of their record on OutageDeck.