Kern Software Not Affected 🔒
On October 21, 2026, two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed in the widely used PHP programming language. Under certain conditions, these vulnerabilities may allow attackers to execute malicious code on affected systems without prior authentication. Operators of potentially affected systems have therefore been advised to review the PHP versions they are using and install the available security updates.
✅ Kern Software Solutions Are Not Affected
We have reviewed whether the recently disclosed vulnerabilities have any impact on our software solutions.
The result: Our software solutions are not affected by CVE-2026-109618 or CVE-2026-109619.
As a Kern AG customer, no action is required on your part in connection with these two vulnerabilities. No additional measures are required on our side with regard to our software solutions either.
🔐 Security Is a Top Priority for Us
We closely monitor new security advisories and potential vulnerabilities and assess their possible impact on our solutions. This enables us to determine at an early stage whether our software or our customers may be affected and to take any necessary action.
👉 Questions About the Security of Our Solutions?
If you have any questions regarding the current vulnerabilities or the security of our software solutions in general, please feel free to contact us.
Contact us – we will be happy to help.
You can also find further information about security and compliance at Kern AG in our Security & Compliance section.