PHP Vulnerabilities (PHP2Shell): Available security patches for PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 have been deployed to all potentially in-scope instances, with no evidence found of customer impact. Read the full statement from Coupa Security.