MCO has confirmed that the MyComplianceOffice platform is not affected by the recently disclosed critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619.
The MCO Information Security team immediately completed a thorough assessment following disclosure of the vulnerabilities. No action is required from MCO customers in relation to their use of the platform.
MCO remains committed to security and continues to monitor developments and assess potential vulnerabilities as part of our ongoing information security practices.
.svg "MCO-Color-logo")
