Trust and Security Portal
Wyden is an infrastructure company that builds the world’s leading software for institutional digital asset trading, delivered to banks and brokers. For more than a decade, we have worked with clients in some of the most secure and highly-regulated industries. Today, security remains the cornerstone of our product development, company culture, and internal operations.
Wyden cares deeply about the compliance and security outcomes of our clients, and our commitment to data privacy and security is embedded in every part of our business. We stand resolute in continuously improving our security, data protection, and privacy controls to give you the most effective means of protecting your data possible.
Trust and Security Portal Updates
Wyden not impacted by PHP critical vulnerabilities (CVE-2026-109618, CVE-2026-109619)
PHP has released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. We confirm that none of the systems, services or platforms that Wyden operates or maintains on behalf of its customers are based on PHP. Our services are therefore not affected.
The findings are documented by NIST and CERT-EU:
- CVE-2026-109618: <https://nvd.nist.gov/vuln/detail/CVE-2026-109618>
- CVE-2026-109619: <https://nvd.nist.gov/vuln/detail/CVE-2026-109619>
- CERT-EU Security Advisory 2026-018: <https://cert.europa.eu/publications/security-advisories/2026-018/>
No action is required for Wyden services. If you run PHP in your own environment, we recommend updating to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 without delay. Please contact Wyden Support (support@wyden.io) with any questions.