INFORM: Security Information on Current PHP Vulnerabilities

Germany's Federal Office for Information Security (BSI) has issued a warning regarding two critical vulnerabilities in the PHP programming language (CVE-2026-109618 and CVE-2026-109619).

We have thoroughly assessed the potential impact of these vulnerabilities. Most of our software solutions and applications do not use PHP and are therefore not affected by these vulnerabilities. Where necessary, we have implemented the required security updates. Our websites, domains, and external customer portals have also been reviewed and secured accordingly. All INFORM software solutions, websites, and domains are protected accordingly.

No action is required from any of our customers.

We will continue to monitor developments and take additional measures if necessary.