Vulnerabilities

Dear Customers,

Following the public disclosure on April 29, 2026 of a critical Linux kernel vulnerability tracked as CVE-2026-31431 and nicknamed “Copy Fail”, we immediately initiated a comprehensive assessment of all potentially affected systems and infrastructure.

We are writing to confirm that Contentsquare services and customer data remain secure. Specifically:

• Proactive Assessment & Rapid Response: Upon identification of CVE-2026-31431, our security team promptly invoked our incident response protocol. We conducted a thorough scope assessment across our full infrastructure, including all Linux-based systems and workloads. Interim mitigations were applied immediately while awaiting official patches from our vendors.

• Patch Deployment Near Complete: We are pleased to confirm that the vast majority of our production systems and services have been successfully patched against CVE-2026-31431, with zero downtime and zero failed deployments throughout the process. A small number of remaining workloads are actively being remediated and are expected to reach full patch coverage imminently.

• No Impact on Customer Data: Our investigation confirms that no customer data was accessed, exfiltrated, or impacted as a result of this vulnerability. No breach or unauthorized access has been identified within our systems or those of our sub-processors.

• Ongoing Monitoring: We’re continuously monitoring all systems for any signs of exploitation, and any newly identified affected assets are being remediated without delay.

We remain committed to the highest standards of security and transparency. If you have any questions or require a formal written confirmation, please contact us at security@contentsquare(.)com.

Sincerely,
The Contentsquare Security Team