Xactly is aware of the recently disclosed PHP vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619. Based on our investigation to date, we have not identified any exploitation of these vulnerabilities in the Xactly environment or any impact to customer data.As a precaution, we have temporarily disabled the Analytics refresh pages while we complete our review. The Analytics refresh pages are purely for monitoring the status of the refresh and do not impact core functionality
We intend to post updates on this page as appropriate.