Notice on the Response to the PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
SECURITY
Notice on the Response to the PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619)
Dear JV-Campus Users,
Thank you for using JV-Campus.
On October 21, 2026 at 23:00 (JST), The PHP Group released a security update that fixes two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). Government agencies have also issued alerts urging the prompt application of the fixed version.
As of now, we have not identified any unauthorized access or information leakage resulting from these vulnerabilities. No action, such as changing passwords, is required of our users.
We will continue to monitor information from relevant organizations. If any further action becomes necessary, we will carry it out promptly and announce it on this page.
We apologize for any concern this may cause and appreciate your understanding.
Email: contact[a]jv-campus.org




