HCO Connect Unaffected by Recent PHP Security Vulnerabilities

October 22, 2026

We are aware of the critical PHP security vulnerabilities disclosed on October 21, 2026, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities specifically affect systems running certain versions of PHP and may allow unauthorized remote execution of code on affected servers.

HCO Connect does not rely on the software components affected by these vulnerabilities. As a result, the reported issues are not expected to directly impact its core systems.

What This Means for Users

HCO Connect remains operational, and users may continue accessing the application as normal. No application updates, password changes, or additional actions are required specifically in response to these vulnerabilities.

We remain committed to maintaining a secure and reliable platform for all authorized buyers and suppliers.

For further information or assistance, please contact your HCO account executive or support through the HCO Connect App.