Security updates for Crunchtime software

Crunchtime takes data security and system integrity very seriously. Our infrastructure is designed with robust, multi-layered security measures, and we continuously monitor for potential threats to ensure your data remains fully protected. Our security engineering team performs thorough reviews of Common Vulnerabilities and Exploits (CVE).

Visit the Crunchtime Security page to learn more about our security processes and the type of audits, like SOC 1-Type 2 and SOC 2 – Type 2, that we perform.

Tip: The official Crunchtime Privacy Policy, Subscription Services Agreement, and Support Policy are available on crunchtime.com

Questions about specific vulnerabilities and exploits

You can find our responses to specific CVEs and other Remote Code Execution (RCE) below.

Is Crunchtime affected by PHP2Shell

Crunchtime platforms and systems were not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). No action is required on your part. If you have any further questions, contact Crunchtime Support.