Welcome to EDB's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Trust Center Updates
EDB Products and the PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Published: October 22, 2026 | Last updated: October 22, 2026
EDB-supplied packages, installers, and container images for supported EDB products do not contain a PHP runtime, and EDB products do not require PHP to be installed on the host.
On October 21, 2026, the PHP project released fixes for two critical vulnerabilities in PHP, an open-source web scripting language. They are tracked as CVE-2026-109618 and CVE-2026-109619 and widely referred to as PHP2Shell. The vulnerabilities are in PHP itself and put PHP installations that serve web requests at risk.
Product status
As of October 22, 2026, we have completed our review of all supported EDB products and found that none are impacted by CVE-2026-109618 or CVE-2026-109619.
What customers should do
If you run PHP elsewhere in your environment, including on the same hosts as EDB software, update to a fixed PHP release. The PHP project lists these as 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and older no longer receive official updates from the PHP project, so check with your operating system or support vendor for patched or backported packages.
Questions
If you have questions, please contact your EDB account team or open a support ticket.
EDB Sub-Processor List Update
The EnterpriseDB sub-processor list has been updated to include Survicate, a customer feedback tool for Support. More details can be found at https://trust.enterprisedb.com/item/edb-sub-processors.
EnterpriseDB Global Support Map Update
EnterpriseDB Global Support Map has been updated to reflect changes in locations of employees associated with support. See the updated list here: https://trust.enterprisedb.com/item/global-support-maps.
EDB Sub-Processor List Update
The EnterpriseDB sub-processor list has been updated to include Docebo (a training platform) and Inkeep (an AI-assisted support platform). More details can be found at https://trust.enterprisedb.com/item/edb-sub-processors.
EDB Sub-Processor List Update
The EDB sub-processor list has been updated to include details related to Technical Support and Postgres AI.