We are aware of the recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, and want to address any questions regarding their potential impact on your organization.
Momentus Enterprise and Elite products are not affected by these vulnerabilities. PHP is not used in the architecture, codebase, or supporting infrastructure of either product. No action is required on your part.
As part of our standard due diligence, we are also working closely with our technology partners to assess any potential impact on third-party integrations. We will provide an update should any further information become relevant to your environment.
The security of your data and the integrity of our products remain our highest priority. Our security program includes continuous, automated monitoring across our entire cloud environment, providing real-time visibility into vulnerabilities, misconfigurations, and potential exposures. When new threats are disclosed, this enables us to rapidly assess their relevance to our infrastructure and prioritize any remediation according to risk. As a result, we are able to identify and address critical vulnerabilities proactively, before they can affect our customers.
Our security and engineering teams closely monitor industry disclosures and threat intelligence, and we remain committed to communicating promptly and transparently on any security matter relevant to your use of our products.
Should you have any questions, please contact your account manager or our support team.
Thank you for your continued trust in Momentus.