Lepide Statement on PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619

October 22, 2026

Lepide, a data security vendor, is committed to maintaining the security and reliability of its products through regular security updates and vulnerability remediation.

Following recent global security advisories concerning two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, organizations running affected PHP versions have been advised to apply security updates promptly. These vulnerabilities could allow unauthenticated attackers to execute malicious code on vulnerable servers, potentially compromising system security.

Lepide has reviewed its product portfolio and confirmed that only the Lepide Data Security Platform Web Console and Report Viewer is affected. All other Lepide products and tools are unaffected.

Security Updates – Remediation Planned

As part of its ongoing security maintenance, Lepide has planned the following updates for the affected component:

PHP: Upgrade from version 8.5.8 to 8.5.12 to address the reported vulnerabilities.
Apache HTTP Server: Upgrade from version 2.4.68 to 2.4.69 as an additional security maintenance measure.

The updates will be rolled out in a controlled manner, including compatibility testing, security verification and application functionality checks, so that the security improvements do not compromise application stability.

Expected Remediation Date: October 29, 2026

Current Status: Remediation planned. The updates will be considered complete following successful deployment and validation.

Confirmed Affected Products – Action Required

Lepide Data Security Platform Web Console and Report Viewer

Confirmed Unaffected Products/Tools – No Action Required

Lepide Data Security Platform (excluding the Web Console and Report Viewer)
Lepide Change Reporter
Lepide Account Lockout Examiner
Lepide Open Shares and Stale Data
Lepide AD User Account Status
Lepide Users with Admin Privileges
Lepide Inactive User Reporter
Lepide Active Directory Self Service

“Keeping our applications secure requires continuous monitoring of emerging security vulnerabilities and timely maintenance. We are taking a controlled approach to these updates, with appropriate testing and validation to strengthen security while maintaining application stability.” – Danny Murphy, Chief Product Officer, Lepide

Need Assistance?

Customers who need help deploying the update can contact the Lepide technical support team to schedule a session and receive guidance.

USA / Canada: +1(0)-800-814-0578
UK / Europe: +44(0)-208-099-5403
Email: support@lepide.com