[Quickbase Status] Notice: PHP Vulnerability (Informational)

Informational

10/22/2026, 11:01am EDT

[Quickbase Status] Notice: PHP Vulnerability (Informational)

Status: closed

Date: 10/22/2026, 11:00am EDT

Affected Components:

Quickbase Service - US Region Quickbase Service - EU Region Quickbase Pave - US Region Quickbase Community Quickbase Company Website Quickbase Help Quickbase Support Portal Quickbase University Quickbase Audit Logs - US Region Quickbase Audit Logs - EU Region Quickbase Automations - US Region Quickbase Billing - EU Region Quickbase Billing - US Region Quickbase Extensions - EU Region Quickbase Fastfield - EU Region Quickbase Extensions - US Region Quickbase Pipelines - EU Region Quickbase Fastfield - US Region Quickbase Pipelines - US Region Quickbase Platform Analytics - EU Region Quickbase RESTful APIs - EU Region Quickbase Platform Analytics - US Region Quickbase RESTful APIs - US Region Quickbase Sync - EU Region Quickbase Sync - US Region Quickbase Webhooks - EU Region Quickbase Webhooks - US Region

Update

10/22/2026, 11:00am EDT

Regarding the recently reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (known as PHP2Shell), Quickbase products or services used by customers are not impacted by these vulnerabilities.

On October 21, 2026, PHP released fixes for two critical remote code execution vulnerabilities. We reviewed our environment as soon as they were published.

Quickbase platform and products: We do not use PHP in the Quickbase platform or products. These vulnerabilities do not affect them.

Customer data: We found no impact to customer data or to the services customers use.

Internal systems: We found one legacy internal service that uses PHP. It supports our marketing operations It is not reachable from the Internet. It does not store or process customer data. We are updating it to a fixed PHP version.

Monitoring: We reviewed our systems and found no sign of compromise. We continue to monitor.