Jotform statement on PHP2Shell vulnerability

Share

Summarize with:

Jotform is aware of the critical PHP security vulnerabilities publicly referred to as PHP2Shell (CVE-2026-109618 & CVE-2026-109619). PHP is one of the technologies used to power our platform, and our team treated this issue as top priority.

We promptly implemented mitigation measures to reduce the potential risk while awaiting the official PHP security release. Following the release, we validated and deployed the patches across the systems, completing the remediation of these vulnerabilities.

Protecting your information and maintaining your trust remain central to everything we do. Our ongoing security monitoring continues as part of our commitment to keeping Jotform secure.

For customers who have more specific inquiries regarding this matter, please use our Help Center, or if you are a Jotform Enterprise customer, feel free to contact your account manager.

Was this article helpful?

Yes (5)

No (0)

We're sorry to hear that. What problem did you have with the article?

How can we improve this article?

What did you like best about this article?

AUTHOR

Jotform Editorial Team

Jotform's Editorial Team is a group of dedicated professionals committed to providing valuable insights and practical tips to Jotform blog readers. Our team's expertise spans a wide range of topics, from industry-specific subjects like managing summer camps and educational institutions to essential skills in surveys, data collection methods, and document management. We also provide curated recommendations on the best software tools and resources to help streamline your workflow.