We would like to provide a further update on our ongoing remediation efforts relating to CVE-2026-109618 and CVE-2026-109619. Our engineering teams have now completed the priority security updates across all identified publicly accessible services.
As further technical information regarding these vulnerabilities becomes available, additional assessment and remediation may be necessary. Our engineering teams will continue to monitor developments closely and take any further action required.
We have made significant progress today and will continue to prioritise the security and integrity of our services. Further updates will be provided as appropriate.
Posted Oct 21, 2026 - 19:03 UTC
Identified
Following our earlier communication regarding security vulnerabilities CVE-2026-109618 and CVE-2026-109619, we wanted to provide a further update on our remediation efforts.
Security patches have now been released, and our engineering teams are actively deploying the necessary updates across relevant systems as a precautionary measure.
During this process, there may be minor, temporary interruptions to service as systems are updated and restarted. We are taking steps to minimise any disruption and will continue to monitor our services closely throughout the deployment.
We appreciate your patience and understanding as we work to ensure our systems remain secure and up to date.
We will provide further updates as necessary.
Kind regards, The SharpStream Team
Posted Oct 21, 2026 - 16:36 UTC
Investigating
We are aware of the recently disclosed security vulnerabilities CVE-2026-109618 and CVE-2026-109619 and are actively reviewing the available information to assess any potential impact on our systems and services.
The situation remains fluid, with further technical details and security patches expected from the relevant maintainers.
In the meantime, our engineering teams are closely monitoring developments and preparing to deploy the necessary updates as soon as verified patches become available.
We will provide a further update once additional information is confirmed, including any relevant remediation actions.
We take the security and integrity of our services seriously and will continue to monitor the situation closely.
Posted Oct 21, 2026 - 13:24 UTC
This incident affects: Portal (Portal user access), TimbreCMS (TimbreCMS user access), and Analytics (Radar User Access).