PHP2Shell Security Vulnerabilities did not compromise Mango Languages
We would like to provide an update regarding PHP2Shell security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) disclosed by the global cybersecurity community on 10/21/2026 and their impact on the services of Mango Languages.
Following a thorough review of our systems, we found no evidence that our systems or products have been compromised as a result of these vulnerabilities, and no evidence that any customer data has been lost, stolen, or otherwise compromised.
Mango Languages’ developed products do not use PHP, which allowed our core services to remain operational throughout this period. However, as a precautionary measure, certain functionalities provided by our third-party suppliers were temporarily disabled while the security of those services was being verified.
Following confirmation from our suppliers that their respective services were safe to use, all temporarily disabled functionalities were fully restored on 10/22/2026.
The security and privacy of our customers remain a top priority. We are pleased to confirm that our services have returned to normal operations, and we remain committed to providing a secure and reliable learning experience.
Thank you for your continued trust.
Questions? Email support@mangolanguages.com or reach out to your customer success manager.