Security Advisories
When a widely reported vulnerability could affect cloud services or connected devices, we review it against the Xyte Device Cloud, Connect+ Edge, and Xyte Secure Edge, and post our findings here. For anything not listed, contact your Xyte representative or our security team.
PHP vulnerabilities: CVE-2026-109618 and CVE-2026-109619
Published: October 26, 2026 Status: Not affected
Two critical PHP vulnerabilities were recently disclosed. They could let an attacker take control of an affected web server without logging in.
Xyte does not use PHP anywhere in its platform or edge components, and neither do our direct infrastructure providers. No action is required from Xyte customers.
If your organization runs its own PHP-based websites, check with your hosting provider or IT team about patching to the fixed versions.
Updated about 2 hours ago