Is Vyond affected by the PHP vulnerabilities?

Date: October 22, 2026

Description: On October 21, 2026, the PHP project announced two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (“PHP2Shell”), for which patches were released.

Answer: No, Vyond’s website and its video creation platform were not impacted, and all customer data and systems are safe and properly patched. 

FAQ

1. Does the Vyond platform use PHP? 
Answer: No, the Vyond platform does not use PHP. As such, no customer content was in jeopardy from this vulnerability within the Vyond platform.

2. Has Vyond confirmed if third party platform components use PHP? 
Answer: Yes, Vyond has reached out to third party platform components to verify usage.

3. Have the latest PHP security updates been applied by third party platform components? 
Answer: Vyond’s third party platform components who have confirmed usage of PHP, have applied patches.

4. Has Vyond found any evidence of exploitation, unauthorized access, or unusual activity on systems connected to our services or data? 
Answer: No evidence of exploitation, unauthorized access, or unusual activity has been found.

5. Has Vyond encountered any service disruption, downtime or degraded service for us as a result of your response? 
Answer: No, services have not been impacted.
 

For more information on our security practices, visit our Trust Center. For questions, please contact support@vyond.com.