# Chargebee: Subject: Security Notice: No Impact from PHPshell Zero-Day Vulnerability

> Chargebee reports no impact from the PHPshell zero-day vulnerability on its Product Security component. Chargebee states that it does not use PHP in customer-facing workflows. The provider continues to monitor the situation and no customer action is required.

- Provider: [Chargebee](https://outages.cc/chargebee.md)
- Type: Incident
- State: monitoring
- Worst impact: Operational
- Started: 2026-10-22 15:43 UTC
- Components: Product Security
- Official update: https://stspg.io/7zx1hf7fyhhd

## Updates from Chargebee

### monitoring, 2026-11-01 17:18 UTC

Chargebee is aware of the recently reported PHPshell zero-day vulnerability and has completed an initial assessment of its potential impact on our services. Chargebee does not use PHP in its customer-facing workflows. Based on our assessment, this vulnerability does not affect Chargebee’s services or customer integrations, and no action is required by our customers at this time. As an additional precaution, we are verifying with our subprocessors to confirm they are unaffected and to ensure appropriate safeguards remain in place across our service ecosystem. We will continue to monitor relevant security developments and provide updates if our assessment changes. If you have any questions, please contact Chargebee Support.