Dear Wezen user,
We are writing to provide an update regarding the recently disclosed critical security vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619.
Our Development and Infrastructure teams have completed a thorough review of our systems and technical stack. We can confirm that Wezen is not impacted by these vulnerabilities.
What you need to know
- The technical stack used by the Wezen platform and its features (Wezen SAM, Translate, Write, Codex, Corpus, API...) does not include any PHP, confirmed by an analysis of our codebase and infrastructure.
- This also extends to SAM channel integrations (Akeneo, Quable, Contentstack...)
- Connectors deployed on our clients' environments (Salesforce Commerce Cloud, Sitecore, AEM...) are not affected either, as confirmed by the analysis of their code.
- If you use Magento with our middleware, please ensure your Magento instance’s PHP version is updated to the latest secure release. No updates or changes are needed for the middleware itself.
If you have any questions or require additional details, feel free to reach out to your Wezen Solutions Engineer / Customer Success Manager.
Sincerely,
The Wezen team