# Amplitude: Notice: Amplitude not impacted by recent PHP vulnerabilities

- Provider: [Amplitude](https://outages.cc/amplitude.md)
- Type: Incident
- State: Resolved
- Worst impact: Operational
- Started: 2026-10-22 19:25 UTC
- Resolved: 2026-10-22 19:25 UTC (lasted 1 min)
- Official update: https://stspg.io/0m5rd384n8v5

## Updates from Amplitude

### resolved, 2026-10-22 19:25 UTC

Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation. No customer action is required at this time. As this is a developing advisory, any further updates will be communicated appropriately via our Trust Center at https://trust.amplitude.com/updates?tab=updates&update=65d46972-f7ed-4f53-bccf-f86f1d18393e. Please subscribe to our Trust Center for notification on updates as no further updates will be made on our Statuspage here.