Security
On October 24, 2026, we published a security bulletin for Apigee.
On October 24, 2026, we published a security bulletin for Apigee.
Two vulnerabilities in PHP core (CVE-2026-109618 and CVE-2026-109619, "PHP2Shell") allow an unauthenticated attacker to execute code remotely on a server running a vulnerable PHP version. The impact is limited to Drupal-based Apigee developer portals, which customers deploy and operate. Apigee, Apigee Hybrid, and the Apigee integrated portal don't use PHP and aren't affected.
Security bulletin published: GCP-2026-072
Read the original announcement
Get Apigee API Management updates by email
Don't miss the next one: a weekly email with Apigee API Management's new features and deprecations.