External security advisory affecting Vasion products resolved

Affected Components

VasionNow - US Region - Administrative ConsoleVasionNow - US Region - Client - Chrome OSVasionNow - US Region - Client - Linux OSVasionNow - US Region - Client - Mac OSVasionNow - US Region - Client - Mobile (Android)

Updates

Resolved

October 30, 2026 at 02:07 PM UTC

Vasion has released fixes for the PHP RCE vulnerabilities and eMudhra intermediate CA compromise, resolving the incident.

Monitoring

October 28, 2026 at 01:37 PM UTC

Vasion released fixes for both security issues in hosted services, except FedRAMP and Virtual Appliance where updates are in progress.

Monitoring

October 25, 2026 at 05:48 PM UTC

Vasion patched PHP remote code execution vulnerabilities in FedRAMP services; eMudhra certificate compromise remediation continues.

Monitoring

October 23, 2026 at 05:43 PM UTC

Vasion has patched PHP vulnerabilities in hosted services and released an updated VA; eMudhra certificate remediation continues and is being validated.

Identified

October 22, 2026 at 07:00 PM UTC

Vasion continues remediating PHP remote code execution vulnerabilities and eMudhra intermediate CA compromise; hosted service updates are underway and being validated.

Identified

October 21, 2026 at 07:56 PM UTC

Vasion is remediating PHP remote code execution vulnerabilities and compromised eMudhra intermediate certificates; hosted services are being updated with no customer action required.