Following the disclosure of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, we want to provide a clear statement for Juriba customers.
Juriba DPC, Juriba App Readiness, Juriba App Owner, and Juriba KB do not use PHP and are not affected by these vulnerabilities. No updates or configuration changes to these products are required in response to these two issues.
This statement applies to the Juriba products listed above. If your organization uses PHP in other applications or services, please review the PHP project’s security advisory and follow the relevant update guidance.
If you have questions about your Juriba deployment, please contact Juriba Support.