Security Advisory

We are aware of PHP2Shell, a set of two critical vulnerabilities affecting certain web applications, tracked as CVE-2026-109618 and CVE-2026-109619. These vulnerabilities are Internet-wide and are not specifically targeted at DocMagic systems.

While we are currently investigating this issue, we want to emphasize that DocMagic core services, such as Automated Compliance, Document Generation, eVault/SmartREGISTRY as well as the eSign Signing View experience are not impacted.

Out of an abundance of caution, we are temporarily taking the eSign console (Lender, Settlement Agent, and Notary) experiences offline to complete our risk assessment.