JMP Statement Regarding Critical PHP Remote Code Execution Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

background-image

Style

blue-purple-gradient, background-image-narrow, text-light, no-gray-border

Description

JMP promptly initiated a review of its products, services, and relevant infrastructure for exposure to CVE-2026-109618 and CVE-2026-109619.

Our assessment of JMP products has not identified exposure to these vulnerabilities. Where remediation was required within supporting environments, appropriate security updates and controls have been applied and validated.

We have identified no evidence of successful exploitation or unauthorized access to JMP systems or customer information associated with these vulnerabilities.

JMP continues to monitor the issue and relevant vendor guidance. No action is required by JMP customers at this time.