Product security notices
This page lists security notices for Holm Security products. It includes fixed vulnerabilities and end-of-life updates for product versions and components.
| Summary: | Impacted products/ components: | Description: | Date: | Status: |
| PHP vulnerability |
Interfaces for cloud deployment (Security Center, and Organizer). |
Critical vulnerabilities have been found in PHP, a scripting language used in our platform. They are tracked as CVE-2026-109618 and CVE-2026-109619, and score 9.2 out of 10 (critical) on CVSS v4.0. Read the PHP advisory. More information from Holm Security. | 2026-10-21 | Patched and remediated 2026-10-21. |
| PHP vulnerability |
Interfaces for on-prem core machine (Security Center, Organizer, and Back Office). |
Critical vulnerabilities have been found in PHP, a scripting language used in our platform. They are tracked as CVE-2026-109618 and CVE-2026-109619, and score 9.2 out of 10 (critical) on CVSS v4.0. Read the PHP advisory. More information from Holm Security. Specific information for customers using on-prem deployment. | 2026-10-21 |
A patch was released 2026-10-23, and all standard systems are patched and remediated. |
Vulnerability disclosure policy
If you believe you have found a security vulnerability in a Holm Security product, we want to hear from you. This article explains how to report it and what you can expect from us:
Vulnerability disclosure policy