We are aware of the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 disclosed on October 21, 2026. Namecoach products do not use PHP and are not affected. This includes the Namecoach web application, our LMS integrations, Namecoach AI for Outlook and Teams, Namecoach for Events and the Namecoach API.
Our legacy marketing website (cloud.name-coach.com) ran on PHP. It did not have access to customer data. On October 23 we redirected it to our new website, namecoach.ai, and shut down the old server. We are monitoring and will post a final update when the cleanup is complete.