Uploads restricted due to PHP vulnerabilities

» View Event Details | Created Wed, 21 Oct 2026 13:05:00 +0000

In Progress

Two high-risk security vulnerabilities in PHP have been announced: CVE-2026-109618 and CVE-2026-109619. As a precautionary measure, we are temporarily disabling the ability to import local files, across the Maxemail platform.

What will this impact:

• Uploads - List and Datatable uploads from local files, and image uploads for email content will be temporarily unavailable.

Workaround:

• Data can still be imported from other non-local sources, such as SFTP.

Our engineering team is actively monitoring the situation and assessing its impact. We will provide further updates on this status page as more information becomes available.