“JAMS Software is aware of the critical PHP interpreter vulnerabilities disclosed on October 21, 2026 (CVE-2026-109618, CVE-2026-109619).
JAMS products, including the JAMS Scheduler, Agents, Desktop Client, Web Client, REST API, Automate Schedule/Skybot, and JAMS Incident Management, do not include, bundle, or depend on PHP and are not affected.
Please note that customers who run PHP scripts through JAMS Jobs use their own PHP installation and should patch it under their normal process.
There is one thing to check on your side. If you run PHP scripts through JAMS Scheduler jobs, those jobs use your own PHP installation, not one supplied by JAMS. Patch that installation as you normally would”
Comments