Shopware - Status Page

The PHP project is releasing a new version today at 16:00 CEST to fix two security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

Once the release is available, we will rebuild and redeploy all applications to apply the fix.

As part of the same maintenance, we will also deploy an updated root CA bundle that removes the compromised eMudhra certificates. More details: https://blog.cloudflare.com/emudhra-certificate-compromise/

This should not have any impact on your applications.

The PHP project is releasing a new version today at 16:00 CEST to fix two security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

Once the release is available, we will rebuild and redeploy our affected app services to apply the fix.

As part of the same maintenance, we will deploy an updated root CA bundle to these services that removes the compromised eMudhra certificates. More details: https://blog.cloudflare.com/emudhra-certificate-compromise/

Updates are rolled out without downtime, so we don't expect any impact on your shops or apps. We will post an update here once the rollout is complete.