Resolved
Last updated: October 30, 2026 at 10:17 PM UTC
PHP core vulnerability security review resolved
Affected Components
Production - APAC - Financial Close & Consolidation - Account ReconciliationsProduction - EU - Financial Close & Consolidation - Account ReconciliationsProduction - US - Financial Close & Consolidation - Account ReconciliationsProduction - US - Invoice-to-Cash - Cash ApplicationProduction - US - Invoice-to-Cash - eInvoicing & Payments
Updates
Resolved
October 30, 2026 at 10:17 PM UTC
BlackLine confirmed all products and hosting environments are secure after investigating PHP core vulnerabilities, with no customer exposure or service disruption.
Monitoring
October 26, 2026 at 07:54 PM UTC
BlackLine confirmed no customer exposure to PHP core vulnerabilities and completed patching non-exposed resources; monitoring continues.
Monitoring
October 21, 2026 at 10:28 PM UTC
BlackLine is monitoring PHP core vulnerabilities; no indicators of compromise found, WAF protections active, and internal patching targeted for completion by October 23, 2026.