We are putting all non-production websites into maintenance mode to prevent bad actors from being able to access them.

For customers using Dropsolid Edge Shield, we have enabled virtual patches provided by our security partner and are evaluating whether these are sufficient. For customers not using Edge Shield, we are investigating which additional measures are needed. We will share more information as soon as possible.

Within the next 30 minutes we will roll out a mitigation. While we restart some services, you may experience a short service interruption. We will post an update once the rollout is complete.

We have emailed our customers about these vulnerabilities. This email was sent by Dropsolid and is legitimate. Our teams are actively working on mitigations and are ready to roll out the PHP update as soon as the patches are released (expected around 16h CEST). If you have any doubt about a message from us, contact support@dropsolid.com or your Service Delivery Manager or Account Manager.

We are continuing to work on the issue.

We are aware of CVE-2026-109618 and CVE-2026-109619. So far we see no impact on our platform or customer environments. As a precaution, we are applying mitigation steps throughout the day, which may cause brief service disruptions. We will post an update once mitigation is complete.