Security Advisory: Critical PHP Vulnerabilities

Riverty has responded to the recently disclosed critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. Our security and technology teams immediately activated established response procedures, assessed Riverty systems and initiated the required protective measures. 

Our response 

• We identified and assessed potentially affected systems across Riverty. 

• We implemented the required protective measures and security updates; any remaining remediation is completed based on risk and exposure remediation process. 

• Riverty Security is actively monitoring the situation and coordinating the response across the organization. 

• Based on our current assessment, there is no evidence that these vulnerabilities have been successfully exploited within Riverty. 

Protecting our systems, data and customers remains our highest priority. We continue to monitor developments closely and will apply any additional security measures where necessary.