Trust Center
Magnet Forensics treats the security and privacy of our partners and customers with the highest importance. We work diligently to ensure that we’ve implemented proper security processes, standards, and procedures at all levels of our business. This Trust Center is aimed at providing you with more information on our security infrastructure and practices. For more information on how we handle any data we collect, please refer to our Privacy Policy.
Trust Center Updates
PHP Vulnerability Update
Summary
On October 21, 2026, the PHP project released fixes for two critical vulnerabilities in the PHP programming language, tracked as CVE-2026-109618 and CVE-2026-109619 and also known as "PHP2Shell." Both can allow an unauthenticated attacker to run code on a web server that uses an unpatched version of PHP. Security vendors and cloud providers have reported exploitation attempts across the industry.
Magnet Forensics began assessing its products, services, and infrastructure as soon as the fixes were announced. Our products largely do not use PHP. We have not identified any impact to customers or their data.
Our Products
- Magnet One and Magnet Atlas: Updated to a fixed PHP version on October 21, 2026
- Magnet Nexus: Does not use PHP
- Magnet Automate: Does not use PHP
- Griffeye: Does not use PHP
- Magnet Review: Magnet Forensics' own code does not use PHP. A verification of third-party components has also been completed, and there is no PHP used.
Our websites and hosted services
We have updated our main website and its development site. We are confirming the status of our remaining web properties with their owners and vendors and will update this page as each is confirmed.
What we have done
- Updated products that use PHP, and our main website, to fixed versions
- Begun searching our environment for other systems that use PHP, including our cloud environments and domain records
- Begun asking our vendors to confirm they have addressed the vulnerabilities
Exploitation
We have not identified evidence of successful exploitation within our environment, and we continue to monitor.
What customers should do
No action is required for the Magnet Forensics products listed above.
Questions
For ongoing updates, please visit Magnet Forensics’ Customer Support Portal, or reach out to support@magnetforensics.com.