18.78.3
October 22nd, 2026
General
Security update: PHP vulnerability patched
On 21/10/2026, critical vulnerabilities (CVE-2026-109618 / CVE-2026-109619) affecting PHP were publicly disclosed. As a precaution, we temporarily closed potential attack vectors while we rolled out fixes.
By the evening, all Piwik PRO environments were patched and all features were available again. Tracking was not affected, there was no data loss. There is no additional actions required from our customers.