gridX's System Status
gridX is not affected by CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell")
On 21 October 2026 the PHP project released emergency patches for two critical vulnerabilities allowing unauthenticated remote code execution: CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4.0 9.2. They affect PHP 5.4 through 8.5 in all common deployment modes, and exploitation has been observed in the wild. Fixes are available in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; updating is the only complete remediation.
gridX does not use PHP. The XENON platform, our APIs, our internal tooling and our public websites contain no PHP runtime or PHP-based components, including PHP-based content management systems such as WordPress, Drupal or TYPO3. Neither CVE is exploitable against gridX systems, and there is no indication that our products, build systems, customer environments or customer data are affected. We are reviewing our suppliers' advisories, continue to monitor the situation, and will inform affected partners should our assessment change.
All Systems Operational
Updates on system performance, incidents, and scheduled maintenance of gridX services