Dbvisit Standby is not affected by PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
Overview
On October 21, 2026, the PHP project published details of two critical vulnerabilities in the PHP runtime: CVE-2026-109618 and CVE-2026-109619. Both carry a CVSS v4 score of 9.2, and they affect PHP core itself, the interpreter, rather than any framework or CMS built on top of it.
Is Dbvisit Standby Affected?
No. Dbvisit Standby and Dbvisit StandbyMP are not impacted by these vulnerabilities. This applies to all versions, including:
• Dbvisit Standby version 6
• Dbvisit Standby version 7
• Dbvisit Standby version 8,9 and 10
• Dbvisit StandbyMP version 11 through to the latest release, 12.4
Action Required
No action is required for Dbvisit Standby. You do not need to upgrade or patch your Dbvisit installation in response to these vulnerabilities.
However, if other applications on your database servers or wider environment use PHP, we recommend checking them. Fixed releases are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and versions 8.1 and older no longer receive updates from the PHP project.
Why Are We Telling You This?
Many customers run security scans and compliance checks across their infrastructure when critical vulnerabilities are announced. This article confirms that Dbvisit Standby is not exposed to these issues, so you can document it accordingly.
Need Help?
Our support team is available to answer any questions about this advisory or the security of your Dbvisit Standby environment.
Comments