Security Update: Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) Patched

Incident Report for Class Technologies Inc

Resolved

Class for Zoom and Class for Teams have been patched against two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619 ("php2shell"). The patches were applied on October 21, 2026. There was no impact on service availability, and you don't need to do anything.

For full details, see our security advisory on the Class Trust Center: https://trust.class.com

Posted Oct 26, 2026 - 16:06 EDT

This incident affected: Class for Zoom (Class US, Class Canada, Class South America, Class Europe, Class Middle East, Class Asia Pacific) and Class for Teams (Class for Teams US, Class for Teams Canada, Class for Teams South America, Class for Teams Europe, Class for Teams Middle East, Class for Teams Asia Pacific).