# Notice: Amplitude not impacted by recent PHP vulnerabilities

- Provider: [Amplitude](https://down.guide/amplitude)
- Level: confirmed
- Impact: Degraded
- lasted 0m
- started 2026-10-22 19:25 UTC
- id: DWN-352dd7235a
- Official page: https://stspg.io/0m5rd384n8v5

## Updates from Amplitude
### 2026-10-22 19:25 UTC: resolved
Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation.
No customer action is required at this time. 
As this is a developing advisory, any further updates will be communicated appropriately via our Trust Center at https://trust.amplitude.com/updates?tab=updates&update=65d46972-f7ed-4f53-bccf-f86f1d18393e. 
Please subscribe to our Trust Center for notification on updates as no further updates will be made on our Statuspage here.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).