
IDnow GmbH Status
Real-time updates of IDnow GmbH issues and outages
IDnow GmbH status is Operational
VideoIdent
eID
AutoIdent
AutoIdent QES
POS
Check'nSign.io
IDCheck.io
Active Incidents
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Dear Customers, To comply with the requirements of Xcode 27, new versions of our iOS SDKs are available. These releases increase the minimum supported version to iOS 15.
Customers are strongly recommend to update to the following new SDK versions: Videoident SDK: version 9.7.16 (or newer) Autoident SDK: version 5.23.0 (or newer)
Where to find the releases Videoident SDK https://github.com/idnow/de.idnow.ios/releases Autoident SDK https://github.com/idnow/de.idnow.ios.sdk.spm/releases
Important: The minimum iOS target for these SDK versions is iOS 15. Applications supporting versions below iOS 15 will need to update their deployment target before integrating the new SDK versions. Customers who cannot yet migrate to iOS 15 should continue using their currently integrated SDK version, where supported, but will not be able to adopt the new SDK versions.
Users connecting to our Video and eSign services must use the latest IDnow app version, which is typically downloaded before starting the ident. Users connecting to our services through web are not affected.
If you have any questions or need assistance with the upgrade, please contact IDnow Support:
Recently Resolved Incidents
We are currently experiencing a performance degradation on our TEST system and are actively investigating the issue. Our team is working to identify the root cause and implement a solution. Customers using eSign with IDnow QTSP are affected.
IDnow GmbH Outage Survival Guide
You're checking on IDnow GmbH - but is your own site converting?
Outages aren't the only thing that costs you visitors.
Get a visual audit that shows exactly where your site loses conversions.
Free, takes 2 minutes.
IDnow GmbH Components
IDnow GmbH IDnow Solutions
VideoIdent
Dear Customers, To comply with the requirements of Xcode 27, new versions of our iOS SDKs are available. These releases increase the minimum supported version to iOS 15.
Customers are strongly recommend to update to the following new SDK versions: Videoident SDK: version 9.7.16 (or newer) Autoident SDK: version 5.23.0 (or newer)
Where to find the releases Videoident SDK https://github.com/idnow/de.idnow.ios/releases Autoident SDK https://github.com/idnow/de.idnow.ios.sdk.spm/releases
Important: The minimum iOS target for these SDK versions is iOS 15. Applications supporting versions below iOS 15 will need to update their deployment target before integrating the new SDK versions. Customers who cannot yet migrate to iOS 15 should continue using their currently integrated SDK version, where supported, but will not be able to adopt the new SDK versions.
Users connecting to our Video and eSign services must use the latest IDnow app version, which is typically downloaded before starting the ident. Users connecting to our services through web are not affected.
If you have any questions or need assistance with the upgrade, please contact IDnow Support:
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eID
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
AutoIdent
Dear Customers, To comply with the requirements of Xcode 27, new versions of our iOS SDKs are available. These releases increase the minimum supported version to iOS 15.
Customers are strongly recommend to update to the following new SDK versions: Videoident SDK: version 9.7.16 (or newer) Autoident SDK: version 5.23.0 (or newer)
Where to find the releases Videoident SDK https://github.com/idnow/de.idnow.ios/releases Autoident SDK https://github.com/idnow/de.idnow.ios.sdk.spm/releases
Important: The minimum iOS target for these SDK versions is iOS 15. Applications supporting versions below iOS 15 will need to update their deployment target before integrating the new SDK versions. Customers who cannot yet migrate to iOS 15 should continue using their currently integrated SDK version, where supported, but will not be able to adopt the new SDK versions.
Users connecting to our Video and eSign services must use the latest IDnow app version, which is typically downloaded before starting the ident. Users connecting to our services through web are not affected.
If you have any questions or need assistance with the upgrade, please contact IDnow Support:
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eSigning AES
AutoIdent QES
Dear Customers, To comply with the requirements of Xcode 27, new versions of our iOS SDKs are available. These releases increase the minimum supported version to iOS 15.
Customers are strongly recommend to update to the following new SDK versions: Videoident SDK: version 9.7.16 (or newer) Autoident SDK: version 5.23.0 (or newer)
Where to find the releases Videoident SDK https://github.com/idnow/de.idnow.ios/releases Autoident SDK https://github.com/idnow/de.idnow.ios.sdk.spm/releases
Important: The minimum iOS target for these SDK versions is iOS 15. Applications supporting versions below iOS 15 will need to update their deployment target before integrating the new SDK versions. Customers who cannot yet migrate to iOS 15 should continue using their currently integrated SDK version, where supported, but will not be able to adopt the new SDK versions.
Users connecting to our Video and eSign services must use the latest IDnow app version, which is typically downloaded before starting the ident. Users connecting to our services through web are not affected.
If you have any questions or need assistance with the upgrade, please contact IDnow Support:
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
API
POS
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Check'nSign.io
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
IDCheck.io
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
ETSI
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
IDCheck.io PVID
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
YRIS
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eSign
Dear Customers, To comply with the requirements of Xcode 27, new versions of our iOS SDKs are available. These releases increase the minimum supported version to iOS 15.
Customers are strongly recommend to update to the following new SDK versions: Videoident SDK: version 9.7.16 (or newer) Autoident SDK: version 5.23.0 (or newer)
Where to find the releases Videoident SDK https://github.com/idnow/de.idnow.ios/releases Autoident SDK https://github.com/idnow/de.idnow.ios.sdk.spm/releases
Important: The minimum iOS target for these SDK versions is iOS 15. Applications supporting versions below iOS 15 will need to update their deployment target before integrating the new SDK versions. Customers who cannot yet migrate to iOS 15 should continue using their currently integrated SDK version, where supported, but will not be able to adopt the new SDK versions.
Users connecting to our Video and eSign services must use the latest IDnow app version, which is typically downloaded before starting the ident. Users connecting to our services through web are not affected.
If you have any questions or need assistance with the upgrade, please contact IDnow Support:
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
InstantSign
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eSign Wallet
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Berlin
Ident Center Essen
Subscribe to SDK notifications
Dear Customers, To comply with the requirements of Xcode 27, new versions of our iOS SDKs are available. These releases increase the minimum supported version to iOS 15.
Customers are strongly recommend to update to the following new SDK versions: Videoident SDK: version 9.7.16 (or newer) Autoident SDK: version 5.23.0 (or newer)
Where to find the releases Videoident SDK https://github.com/idnow/de.idnow.ios/releases Autoident SDK https://github.com/idnow/de.idnow.ios.sdk.spm/releases
Important: The minimum iOS target for these SDK versions is iOS 15. Applications supporting versions below iOS 15 will need to update their deployment target before integrating the new SDK versions. Customers who cannot yet migrate to iOS 15 should continue using their currently integrated SDK version, where supported, but will not be able to adopt the new SDK versions.
Users connecting to our Video and eSign services must use the latest IDnow app version, which is typically downloaded before starting the ident. Users connecting to our services through web are not affected.
If you have any questions or need assistance with the upgrade, please contact IDnow Support:
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
SmartStamp
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Document-based IDV
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Trust Platform
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
IDnow GmbH Ident Centers
Ident Center Munich
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Berlin
Ident Center Iasi
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Timisoara
Ident Center Split
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Athens
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Varna
Ident Center Zagreb
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Zagreb II
Ident Center Osijek
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Metkovici
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Brasov
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Poznan
Ident Center Simeria
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Porto
Ident Center Sarajevo
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
API
Ident Center Thessaloniki
eSigning AES
Ident Center Pune
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
IDnow GmbH Test Systems
VideoIdent
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eID
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Ident Center Pune
AutoIdent
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
AutoIdent QES
We are currently experiencing a performance degradation on our TEST system and are actively investigating the issue. Our team is working to identify the root cause and implement a solution. Customers using eSign with IDnow QTSP are affected.
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
POS
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Check'nSign.io
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
IDCheck.io
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
ETSI
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
IDCheck.io PVID
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
YRIS
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eSign
We are currently experiencing a performance degradation on our TEST system and are actively investigating the issue. Our team is working to identify the root cause and implement a solution. Customers using eSign with IDnow QTSP are affected.
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
InstantSign
We are currently experiencing a performance degradation on our TEST system and are actively investigating the issue. Our team is working to identify the root cause and implement a solution. Customers using eSign with IDnow QTSP are affected.
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
eSign Wallet
We are currently experiencing a performance degradation on our TEST system and are actively investigating the issue. Our team is working to identify the root cause and implement a solution. Customers using eSign with IDnow QTSP are affected.
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
SmartStamp
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io
Document-based IDV
Dear customers,
On 21 October 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP runtime, together referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Both allow unauthenticated remote code execution and are already being exploited in the wild. As soon as the patches were published, we assessed our assets against the affected versions.
IDnow products and services are not affected. No product or service we provide to you runs a vulnerable PHP build, and our public website has been reviewed and is fully patched. No action is required from you currently.
If your security team would like the technical basis for this assessment, our ServiceDesk team can arrange a call with the IDnow Security team. In case you have any questions or need further assistance, please contact IDnow Support: https://support.idnow.io