Recent disclosures relating to PHP vulnerabilities have generated questions from organisations assessing potential exposure within their own environments. Following the publication of CVE-2026-109618 and CVE-2026-109619, Sapphire conducted an immediate review of its infrastructure and services to determine any potential impact. The statement below outlines the actions taken by Sapphire, the findings of our assessment, and the current status of customer-facing services. Securi