# Notice regarding recently-reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

- Provider: [Cloudinary](https://down.guide/providers/cloudinary)
- Confidence: Confirmed
- Impact: Operational
- lasted 0m
- started 2026-10-21 18:22 UTC
- id: DWN-c220faa49a
- Official page: https://stspg.io/232znx2xdp7g

## Updates from Cloudinary
### 2026-10-21 18:22 UTC: resolved
Regarding the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Cloudinary’s core platform, including its upload, transformation, and delivery APIs and Console, does not use PHP and is not affected by these vulnerabilities.
Please note that customers who use the Cloudinary PHP SDK in their own applications should update PHP in their respective environments

From the builder: does your app depend on Cloudinary? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=cloudinary) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Cloudinary.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-c220faa49a), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.