Skip to content
English
  • There are no suggestions because the search field is empty.

Security Notice: KeyShot Assessment of Recent PHP Security Advisories

Last Updated: October 2026

KeyShot continuously monitors security advisories affecting technologies used within our infrastructure, websites, and services. As part of our standard security practices, newly disclosed vulnerabilities are reviewed, assessed for applicability, and remediated where necessary.

Following recent security advisories published by the PHP Project, including but not limited to CVE-2026-109618 and CVE-2026-109619, KeyShot conducted a review of systems, services, and web properties that could potentially be impacted.

Assessment Results

Our review included:

  • KeyShot-developed applications and services
  • Customer-facing websites and web infrastructure
  • Internal systems utilizing PHP-based components
  • Third-party hosted environments that support KeyShot online services

As a result of this review:

  • No vulnerable implementations were identified within KeyShot-developed code.
  • Affected PHP versions identified within supporting website infrastructure were promptly updated in accordance with vendor guidance.
  • No evidence of exploitation, unauthorized access, service disruption, or customer impact was identified.
  • All reviewed systems are operating with the appropriate security updates and mitigations in place.

KeyShot's Security Response Process

KeyShot maintains an ongoing vulnerability management program that includes:

  • Monitoring security advisories from software vendors and industry organizations
  • Assessing applicability and risk to KeyShot products and services
  • Applying security updates and mitigations as appropriate
  • Conducting internal validation and verification activities
  • Continuously monitoring for indicators of compromise or suspicious activity

Security reviews are performed whenever significant vulnerabilities are disclosed in technologies relevant to our environment.

Customer Impact

At this time, KeyShot has identified no impact to customer data, customer environments, or KeyShot products related to the recently disclosed PHP vulnerabilities.

No action is required from KeyShot customers.

Additional Questions

Customers with security-related questions may contact us for additional information regarding KeyShot's assessment and remediation process.