We would like to inform you about recently identified security vulnerabilities affecting PHP (CVE-2026-109618 and CVE-2026-109619), which may impact certain e-commerce platforms and hosting environments. These vulnerabilities are not specific to Nexi's payment plugins but may affect the environments in which they operate.
What action should you take? Self-hosted solutions: If you manage your own hosting environment, we recommend reviewing your PHP version and applying the relevant security updates as soon as possible.
Managed hosting solutions: If your online store is hosted by a third-party provider, security updates are typically managed by your hosting provider. We recommend confirming that the necessary updates have been applied.
We encourage you to review your environment with your technical team or hosting provider and take any necessary actions to ensure your online store remains secure. For further technical details, affected versions and available security updates, please refer to the official PHP security advisory: https://www.php.net/archive/2026.php#2026-10-21-5
Posted Oct 22, 2026 - 12:27 CEST
This incident affected: Netaxept Other Components.