Posted by Respondus Support on 22nd October 2026

Respondus is aware of the recently disclosed PHP security vulnerabilities and the separate eMudhra TLS certificate incident. We have reviewed both issues and taken appropriate actions to address any potential impact on Respondus services. 

PHP Security Vulnerabilities
On October 21, 2026, Respondus addressed two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

All Respondus servers running PHP have been updated to versions containing the security fixes. Remediation is complete, and no action is required by customers or institutions. 

eMudhra TLS Certificate Incident 

Respondus also reviewed the eMudhra TLS certificate incident described in Google’s security advisory. This incident does not directly affect Respondus services.