# Notice: Amplitude not impacted by recent PHP vulnerabilities

- Provider: [Amplitude](https://down.guide/providers/amplitude)
- Confidence: Confirmed
- Impact: Operational
- lasted 0m
- started 2026-10-22 19:25 UTC
- id: DWN-352dd7235a
- Official page: https://stspg.io/0m5rd384n8v5

## Updates from Amplitude
### 2026-10-22 19:25 UTC: resolved
Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation.
No customer action is required at this time. 
As this is a developing advisory, any further updates will be communicated appropriately via our Trust Center at https://trust.amplitude.com/updates?tab=updates&update=65d46972-f7ed-4f53-bccf-f86f1d18393e. 
Please subscribe to our Trust Center for notification on updates as no further updates will be made on our Statuspage here.

From the builder: does your app depend on Amplitude? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=amplitude) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Amplitude.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-352dd7235a), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.