Following the advisories for CVE-2026-109618 and CVE-2026-109619, we have assessed their impact on Intric.
Intric's core platform is built with Python, Go and JavaScript (Node.js). It contains no PHP runtime and no PHP dependencies. Despite this, we reviewed Intric's application source code, dependency manifests and deployment configuration, and verified that no PHP runtime or PHP dependency is present in the material reviewed.
Based on this assessment, we have identified no impact on Intric from these two vulnerabilities. No Intric-specific patch or mitigation is currently required, and customers do not need to take any action within Intric in response to them. Customers operating separate PHP-based systems should follow their software vendors' update guidance.
Separately, we have deployed certificate-trust and security updates to our standard production backend and shared Python services. Runtime checks confirmed that the tested services reject known compromised certificate chains while continuing to accept valid secure connections. We have also updated and verified certificate trust on key infrastructure hosts.
No components marked as affected
Monitoring
Following the advisories for CVE-2026-109618 and CVE-2026-109619, we have assessed their impact on Intric.
Intric's core platform is built with Python, Go and JavaScript (Node.js). It contains no PHP runtime and no PHP dependencies. Despite this, we reviewed Intric's application source code, dependency manifests and deployment configuration, and verified that no PHP runtime or PHP dependency is present in the material reviewed.
Based on this assessment, we have identified no impact on Intric from these two vulnerabilities. No Intric-specific patch or mitigation is currently required, and customers do not need to take any action within Intric in response to them. Customers operating separate PHP-based systems should follow their software vendors' update guidance.
Separately, we have deployed certificate-trust and security updates to our standard production backend and shared Python services. Runtime checks confirmed that the tested services reject known compromised certificate chains while continuing to accept valid secure connections. We have also updated and verified certificate trust on key infrastructure hosts.
