---
title: "Security Notifications"
slug: "security"
status: "update"
updated: 2026-10-22T13:17:30Z
published: 2026-10-22T13:17:30Z
canonical: "kb.pharos.com/security"
excludeFromExternalSearch: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.pharos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Notifications

## Pharos Response to Common Vulnerabilities and Exposures (CVEs), Zero-Day Events, and Viruses.

### Background

Common vulnerabilities and exposures (CVEs), zero-day events, and viruses may affect components of a software solution, infrastructure supporting the solution, or have no impact at all. This page serves to bring all Pharos responses together to more easily serve our customers and partners. To review the latest update for any of these security events, just click on its link below. If a particular CVE is not listed here, it just means that Pharos is not affected by it and our customers/partners have not asked for an official statement on it.

| Response Title | Date Updated |
| --- | --- |
| [Pharos Response to PHP Vulnerabilities (CVE-2026-109618/CVE-2026-109619)](/v1/docs/pharos-response-to-php-vulnerabilities-cve-2026-109618-and-cve-2026-109619) | October 22, 2026 |
| [Pharos Response to HP UPD Vulnerabilities](/docs/pharos-response-to-hp-upd-vulnerabilities) | February 12, 2025 |
| [Pharos Response to OpenPrinting CUPS vulnerabilities (Sept 2024)](https://kb.pharos.com/docs/pharos-response-to-openprinting-cups-vulnerabilities-sept-2024) | October 2, 2024 |
| [Pharos Response to](https://kb.pharos.com/docs/polyfillio-supply-chain-attack) [Polyfill.io](http://Polyfill.io) [Malicious Code (CVE-2024-38526)](https://kb.pharos.com/docs/polyfillio-supply-chain-attack) | September 17, 2024 |
| [Pharos Products and Operations Unaffected by Crowdstrike Error](/v1/docs/pharos-products-and-operations-unaffected-by-crowdstrike-error) | July 23, 2024 |
| [Pharos Response to Ghostscript Vulnerability](/v1/docs/pharos-response-to-ghostscript-vulnerability) | July 23, 2024 |
| [Uniprint Security Update](/v1/docs/uniprint-security-update) | June 20, 2024 |
| [Blueprint and Uniprint Security update](/v1/docs/blueprint-and-uniprint-security-update-december-2023) | December 14, 2023 |
| [Pharos Response to WS_FTP Vulnerability](/v1/docs/pharos-software-is-not-susceptible-to-the-new-ws-ftp-vulnerability) | October 4, 2023 |
| [Pharos Response to WebP Vulnerability](/v1/docs/pharos-response-to-webp-vulnerability) | September 15, 2023 |
| [Print Center Security Update for Blueprint and Uniprint](/v1/docs/print-center-security-update-for-blueprint-and-uniprint) | August 21, 2023 |
| [Pharos response to MOVEit vulnerability (CVE-2023-34362)](/v1/docs/pharos-response-to-moveit-vulnerability) | June 16, 2023 |
| [Pharos response to Text2Shell vulnerability](/v1/docs/pharos-response-to-text2shell-vulnerability) | December 13, 2022 |
| [Pharos response to OpenSSL 3.x vulnerabilities](/v1/docs/pharos-response-to-openssl-3x-vulnerability) | November 14, 2022 |
| [Pharos response to jQuery vulnerability (CVE-2020-11023)](/v1/docs/pharos-response-to-jquery-vulnerability-cve-2020-11023) | June 28, 2022 |
| [Pharos response to Microsoft Support Diagtnostic Tool (MSDT) vulnerability (CVE-2022-30190](/v1/docs/pharos-response-to-microsoft-support-diagnostic-tool-msdt-vulnerability-cve-2022-30190)) | June 3, 2022 |
| [Impact of VMware Vulnerabilities on Pharos Products](/v1/docs/impact-of-vmware-vulnerabilities-on-pharos-products) (CVE-2022-22954, CVE-2022-22960, CVE-2022-22972, CVE-2022-22973) | May 23, 2022 |
| [Impact of Java Vulnerabilities on Oracle Products](/v1/docs/impact-of-java-vulnerabilities-on-oracle-products) (CVE-2022-21449) | April 21, 2022 |
| [Impact of Java Spring Framework Vulnerabilities on Pharos](/v1/docs/impact-of-java-spring-framework-vulnerabilities-on-pharos) | April 4, 2022 |
| [Okta Security Breach](/v1/docs/impact-of-okta-security-breach) | March 27, 2022 |
| [Pharos Response to CVE-2021-44790 and CVE-2021-44224](/v1/docs/pharos-response-to-cve-2021-44790-and-cve-2021-44224) | Dec. 22, 2021 |
| [Impact of Log4j Exploit (CVE-2021-44228) on Pharos Products](/v1/docs/impact-of-log4j-exploit-on-pharos) | Jan. 24, 2022 |
| [Pharos Response to the PrintNightmare Vulnerability](/v1/docs/pharos-response-to-printnightmare-vulnerability) (CVE-2021-36958) | Sep. 10, 2021 |
| [Pharos Software and the Apache Struts Vulnerability](/v1/docs/pharos-software-is-not-susceptible-to-the-new-apache-struts-vulnerability-nor-to-the-jackson-databind-vulnerability) (CVE-2018-1327) | Jun. 26, 2020 |

## Related

- [Pharos software is NOT susceptible to the new WS_FTP Vulnerability - October 2023](/pharos-software-is-not-susceptible-to-the-new-ws-ftp-vulnerability.md)
- [Pharos response to OpenSSL 3.x vulnerability - November 2022](/pharos-response-to-openssl-3x-vulnerability.md)
- [HOW TO: Diagnose 401.x HTTP errors on IIS](/how-to-diagnose-401x-http-errors-on-iis.md)