Critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Incident Report for BundyPlus

Resolved

Security notice: Our platform provider has confirmed the recent critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) do not affect BundyPlus Cloud, and no action is required from you.

Posted Oct 23, 2026 - 11:19 AEDT

This incident affected: my.BundyPlus.com.au (Possum 01 Enterprise, Possum 02 Enterprise, Possum 03 Enterprise, Possum 04 Enterprise, APIv2).