Whether Mapp is affected, what we have found, and what we are doing about it.
This page covers selected security vulnerabilities. No entry does not mean “not affected”.
PHP2Shell
CVE-2026-109618 · CVE-2026-109619
Assessment: 23 Oct 2026
Mapp impact: Mapp Cloud is not affected. Our public websites were affected.
Exploitation: No indications of exploitation at Mapp.
Remediation: Complete. Our public websites have been patched.
Your action: No action required for your Mapp services.
Palo Alto Networks PAN-OS
Assessment: 30 Oct 2026
Mapp impact: The affected PAN-OS management interfaces are not exposed to the internet. Mapp customer services are not affected.
Exploitation: No indications of exploitation at Mapp.
Remediation: Security updates are being deployed. We will confirm completion here.
Your action: No action required for your Mapp services.
BIND 9
Assessment: 30 Oct 2026
Mapp impact: The assessed Mapp services are not affected.
Exploitation: No indications of exploitation at Mapp.
Remediation: Awaiting the applicable security update. We will deploy it once available and validated.
Your action: No action required for your Mapp services.
Node2Shell
Assessment: 30 Oct 2026
Mapp impact: Mapp Cloud core services are not affected, only supporting Mapp Fashion services.
Exploitation: No indications of exploitation at Mapp.
Remediation: Security updates are deployed.
Your action: No action required for your Mapp services.
Questions about your services? Contact your Customer Success Manager.
