PHP Security Update: How LeaseLeads Responded
LeaseLeads applied official PHP patches on October 21, 2026. Our review found no evidence of a breach; no customer data was affected, and no action is needed.
Sign up for our newsletter to always be the first to know about our newest updates, announcements and more.
You may have seen news about two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). They were serious, so we moved fast.
On Wednesday, October 21, the morning the vulnerability was announced, we took these steps:
- Before the official patches were available, we temporarily disabled PHP’s session upload progress feature as an added precaution. The feature was used in a public demonstration of how the vulnerability could be exploited.
- As soon as the official patches were released, we applied them across all LeaseLeads servers.
- Reviewed our systems and found no evidence of a breach or unauthorized access. No customer data was affected.
We’ll spare you the PHP release notes. If you have questions, reply to this email or contact us at support@leaseleads.co
