On 20 October 2026, two critical remote code execution vulnerabilities in PHP, a widely used web programming language (CVE-2026-109618 and CVE-2026-109619, known as “PHP2Shell”), were disclosed ahead of a planned fix. When we learned of them, the Bazaarvoice Security Team began assessing our exposure. Our core customer-facing platform services are not built on PHP and […]