Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) may expose FossID Workbench installations to unauthenticated remote code execution. Customers are strongly advised to update PHP to a fixed version and review the recommended remediation steps.
Security Notices
Talk to a Software Supply Chain Ninja
Book a discovery call with one of our experts to discuss your business needs and how our tools and services can help.