PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Dear providers,
NDD remains committed to the safety, reliability, and evolution of its products, monitoring security alerts and taking the necessary measures to mitigate risks and preserve the integrity of its technology environments.
Regarding the vulnerabilities identified by the codes CVE-2026-109618 and CVE-2026-109619, related to PHP technology, we would like to inform you that, with the exception of NDD Orbix’s ASM portal, the rest of NDD’s products do not use this technology.
Regarding the ASM portal, we would like to emphasize that the necessary fixes have already been applied, including the appropriate measures to mitigate the risks associated with the aforementioned vulnerabilities. This action reinforces NDD’s commitment to proactively monitoring safety alerts and implementing corrective actions to keep its products protected against potential vulnerabilities.
NDD continues to continuously monitor the safety of its solutions, adopting best practices in development, maintenance, and vulnerability management, with a focus on service reliability and the peace of mind of its providers and partners.
We remain available to answer any questions you may have.
Sincerely,
The NDD Team