Industry-wide PHP and Node.js security update

Incident Report for Gainsight

Monitoring

This week, security updates were released for PHP and Node.js. This is an industry-wide issue and is not specific to Gainsight.

Our Security and Engineering teams applied the available patches and mitigations right away, and we have seen no evidence of any compromise. Our Security team continues to actively monitor our systems.

Do I need to do anything? No. If you have questions, contact security@gainsight.com or your Gainsight team.

Posted Oct 23, 2026 - 21:24 UTC

This incident affects: Gainsight CS - US1 Region (Gainsight CS US1 Application), Gainsight CS - US2 Region (Gainsight CS US2 Application), and Gainsight CS - EU Region (Gainsight CS EU Application).