DRACOON is not affected by CVE-2026-109618 and CVE-2026-109619

Incident Report for DRACOON Cloud

Resolved

We are aware of the recently published security vulnerabilities CVE-2026-109618 and CVE-2026-109619 affecting PHP. DRACOON does not use PHP and is therefore not affected by these vulnerabilities. No action is required on your part. We continue to closely monitor security advisories and will keep you informed should this assessment change.

Posted Oct 22, 2026 - 13:12 CEST