Security Information - no impact on IDnow services - PHP2Shell (CVE-2026-109618, CVE-2026-109619)
View the provider incident record →Current answer
IDnow GmbH experienced a minor incident: Security Information - no impact on IDnow services - PHP2Shell (CVE-2026-109618, CVE-2026-109619). ServiceAlert observed recovery on Nov 3, 2026.
Looking for an update now? Check the current status, or follow IDnow GmbH for future changes.
Incident Lifecycle
Affected Components
Ident Center Munich
VideoIdent
VideoIdent
Ident Center Iasi
eID
eID
AutoIdent
Ident Center Split
AutoIdent
AutoIdent QES
AutoIdent QES
Ident Center Athens
Ident Center Zagreb
POS
POS
Check'nSign.io
Check'nSign.io
Ident Center Osijek
IDCheck.io
IDCheck.io
Ident Center Metkovici
Ident Center Brasov
ETSI
ETSI
IDCheck.io PVID
IDCheck.io PVID
Ident Center Simeria
Ident Center Sarajevo
YRIS
YRIS
eSign
eSign
Ident Center Pune
InstantSign
InstantSign
eSign Wallet
eSign Wallet
Subscribe to SDK notifications
SmartStamp
SmartStamp
Document-based IDV
Document-based IDV
Trust Platform
Incident Timeline
Monitoring
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Oct 23, 2026 at 1:17 PM UTC
Was your business affected by this IDnow GmbH outage?
Follow IDnow GmbH and route available status alerts to email or a team channel.