PHP2Shell: your Quividi services are not affected
Our audience measurement platforms are not affected by the PHP2Shell vulnerabilities. The only exposed website, learn.quividi.com, was patched on 22 October.
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (known as “PHP2Shell”), were recently made public. As soon as they were disclosed, our team reviewed every Quividi service to check whether any of them could be exposed.
The result: your audience measurement platforms are not affected, and the only website that needed an update has already been patched.
Status by service
| Service | Status | |
|---|---|---|
| Not affected (PHP isn't used) | Patched | |
| VidiReports | ✕ | |
| VidiCenter | ✕ | |
| Quiotto | ✕ | |
| quividi.com | ✕ | |
| help.quividi.com | ✕ | |
| learn.quividi.com* | ✕ | |
* learn.quividi.com runs on WordPress and uses PHP. We applied the security fix on 22 October 2026, and it is no longer exposed to these vulnerabilities.
Is there anything you need to do?
No. Your VidiCenter account and your VidiReports installations keep running as usual, with no action required on your side.
If you have any questions, our support team is here to help.
Bring us your network. We’ll show you the data.
Thirty minutes with a Quividi solutions architect, your fleet topology, a sandbox you can poke at.