Abnormal AI Statement on PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Abnormal AI Logo

Security Hub

Start your security review
View & download sensitive information
Ask for information
ControlK

This page outlines details on our frameworks, regulations, and certifications that our company holds. Additionally, there are resources available for our product offerings. We are committed to providing secure products that support compliance and build trust. Use this Trust Center to learn about our security and trust initiatives.

  • ADT
  • Avery Dennison
  • Choice Hotels
  • Pegasystems
  • Sentara Healthcare
  • Urban Outfitters

Documents

Featured Documents

REPORTSUS Penetration Test Report

Security Hub Updates

Abnormal AI Statement on PHP2Shell Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Vulnerabilities

Abnormal AI is aware of the recently disclosed PHP2Shell vulnerability (CVE-2026-109618 and CVE-2026-109619).

We have investigated our use of PHP in connection with this vulnerability and determined that no component of the Abnormal service uses PHP. As a result, there is no impact to our customers or their data.

If you have additional questions, please contact the Abnormal Customer Trust team at security-questionnaires@abnormal.ai.

If you think you may have discovered a vulnerability, please send us a note.
Report issue
Built onSafeBase by Drata Logo