PDI Technologies is aware of the recently disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
Upon notification of these vulnerabilities, PDI initiated established cybersecurity response procedures to assess potential exposure across our environment and implement appropriate remediation measures. Our teams have prioritized the review of potentially affected systems and are applying available security updates and mitigations where applicable as part of our ongoing response.
At this time and based on our ongoing investigation, we have identified no evidence of compromise, exploitation, or customer impact related to these vulnerabilities.
We continue to monitor the situation closely, evaluate emerging threat intelligence, and take additional action as appropriate. Protecting our customers, partners, and systems remains a top priority, and we will continue to follow established security practices as our assessment and remediation efforts progress.
If you have questions or concerns, please reach out to your PDI contact or customer support.
Organizations seeking additional guidance on vulnerability assessment, remediation planning, or broader cybersecurity preparedness can visit us online to connect with a member of our cybersecurity team.
Important Information for Hosted Enterprise Customers
As part of ongoing remediation activities, Hosted Enterprise customer VPN connections may be reset periodically during overnight maintenance windows through the next week. No customer action is required or expected.