Hello, this is Fintag, the AI-powered corporate financial asset optimization solution.
Thank you for your continued trust in Fintag.
On October 21, 2026, the Korea Internet & Security Agency (KISA) issued an urgent security update advisory for critical vulnerabilities discovered in the PHP engine (known as "PHP2shell"). Fintag immediately inspected our entire service environment, and we would like to inform you that these vulnerabilities do not affect Fintag services.
Impact on Fintag Services: None
- Fintag is built and operated on a technology stack that does not use PHP.
- On Thursday, October 22, 2026, we directly inspected all production servers and service containers and confirmed that the PHP engine is not installed.
- All services are operating normally, and no action is required on your part.
Vulnerability Overview
- Vulnerabilities: CVE-2026-109618 (Improper Handling of Exceptional Conditions), CVE-2026-109619 (Use After Free)
- Affected versions: PHP versions below 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12, and versions 8.1 and earlier, whose security support has ended
- Severity: Highest risk level, allowing remote code execution without authentication (CVSS v4.0 9.2, Critical)
Fintag's Response
- Continuous monitoring: We are continuously monitoring external access logs in preparation for automated attacks targeting this vulnerability.
- Automatic blocking of abnormal access: Abnormal requests probing non-existent paths are automatically blocked at the front of our service.
- Ongoing follow-up: We will keep tracking follow-up advisories from KISA and related agencies, and will promptly apply and announce any necessary measures.
A Note for Our Customers
Although this vulnerability does not affect Fintag, if your company operates PHP-based websites (such as a WordPress homepage), we recommend checking that they have been updated to the latest secure versions in accordance with KISA's advisory.
For related inquiries, please contact support@fintag.kr and we will assist you promptly.
Fintag will continue to strengthen our security framework to keep your valuable financial data as safe as possible.
Thank you.
The Fintag Team
