Snapshot 185011
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Welcome to EDB's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation. Compliance CCPA EU AI Act GDPR SOC 2 CSA STAR DORA Documents Featured Documents DOCUMENTSRDBA Security Whitepaper DOCUMENTSEDB Security Exhibit DOCUMENTSEDB Ebook Security Best Practices for Postgres REPORTSIndependent Pentest Reports REPORTSSecure Software Development Framework (SSDF) REPORTSSOC 2 Report LEGALEDB Sub-processors Government Security DISA STIGs VPAT's SSDF Product Security Data Security EDB Postgres AI Audit Logging Multi-Factor Authentication View more Reports SOC 2 Report Secure Software Development Framework (SSDF) Independent Pentest Reports View more Data Security Access Auditing Data Backups Data Deletion View more App Security Vulnerability Disclosure Program Software Development Lifecycle (SDLC) Code Analysis View more AI Principles for Responsible AI EDB AI Services Overview EDB Postgres® AI FAQ Legal EDB Sub-processors Data Processing Agreement EDB End-User License Agreement View more Infrastructure System Monitoring Amazon Web Services Azure View more Software Bill of Materials EPAS PGD EDB JDBC View more Data Privacy Training and Insider Threat Transparency Reports Corporate Security Asset Management Practices Email Protection Employee Training View more Policies Asset Management Backup Policy Business Continuity/Disaster Recovery (BC/DR) Policy View more Security Grades RiskRecon EnterpriseDB Corporation A Black Kite EnterpriseDB Corporation A SecurityScorecard EnterpriseDB Corporation Trust Center Updates EDB Products and the PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) Vulnerabilities Published: October 22, 2026 | Last updated: October 22, 2026 EDB-supplied packages, installers, and container images for supported EDB products do not contain a PHP runtime, and EDB products do not require PHP to be installed on the host. On October 21, 2026, the PHP project released fixes for two critical vulnerabilities in PHP, an open-source web scripting language. They are tracked as CVE-2026-109618 and CVE-2026-109619 and widely referred to as PHP2Shell. The vulnerabilities are in PHP itself and put PHP installations that serve web requests at risk. Product status As of October 22, 2026, we have completed our review of all supported EDB products and found that none are impacted by CVE-2026-109618 or CVE-2026-109619. What customers should do If you run PHP elsewhere in your environment, including on the same hosts as EDB software, update to a fixed PHP release. The PHP project lists these as 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and older no longer receive official updates from the PHP project, so check with your operating system or support vendor for patched or backported packages. Questions If you have questions, please contact your EDB account team or open a support ticket. EDB Sub-Processor List Update Subprocessors The EnterpriseDB sub-processor list has been updated to include Survicate, a customer feedback tool for Support. More details can be found at https://trust.enterprisedb.com/item/edb-sub-processors. EnterpriseDB Global Support Map Update General EnterpriseDB Global Support Map has been updated to reflect changes in locations of employees associated with support. See the updated list here: https://trust.enterprisedb.com/item/global-support-maps. EDB Sub-Processor List Update Subprocessors The EnterpriseDB sub-processor list has been updated to include Docebo (a training platform) and Inkeep (an AI-assisted support platform). More details can be found at https://trust.enterprisedb.com/item/edb-sub-processors. EDB Sub-Processor List Update Subprocessors The EDB sub-processor list has been updated to include details related to Technical Support and Postgres AI. If you need help using this Trust Center, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue