Epassi and PHP vulnerabilities. Epassi and PHP vulnerabilities.

Epassi and PHP vulnerabilities.

Epassi is aware of the vulnerabilities identified in PHP technology, CVE-2026-109618 and CVE-2026-109619, and has assessed their impact on the company’s services as part of its established information security vulnerability management process.

Our assessment confirms that the vulnerabilities in question do not affect Epassi in Sweden in any way.

In any event, we continuously carry out security updates and protective measures in accordance with our established vulnerability and patch management process, so that customers can continue to use Epassi securely.

We also continuously monitor developments relating to the PHP vulnerabilities and, where necessary, carry out further assessments and update our action plan in accordance with the guidance and fixes published by the PHP project and suppliers.