Welcome to KLDiscovery's Trust Center.
At KLDiscovery, cybersecurity is a continuous pursuit of excellence deeply embedded in every part of our operations. Every safeguard we implement, every process we refine, and every threat we anticipate reflects our dedication to protecting what matters most to our clients. Our global team stands united by a single principle: trust must be earned and protected every day. We remain committed to delivering security programs that meet today’s demands and anticipate tomorrow’s challenges, staying with our clients until the job is done right.
Trust Center Updates
CVE-2026-109618 and CVE-2026-109619 Vulnerabilities in PHP
KLDiscovery is aware of recently disclosed vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, that could allow remote code execution. Based on our current review, we have not identified any affected systems in our environment. Our security monitoring has not detected any indicators of exploitation. We will continue to monitor vendor and industry guidance and will update this page if our assessment changes.
KLDiscovery 2026 SOC 2 Type II Report Now Available
KLDiscovery's annual SOC 2 Type II report for 2025-2026 is now available via KLDiscovery's Trust Center at https://trust.kldiscovery.com/?itemUid=fa950d02-cbb3-4010-b917-7137a7c2a982&source=click
Please reach out to your primary KLDiscovery contact if you have any questions.
CVE-2026-35300 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware
Following the review of the referenced vulnerability, it has been confirmed that the organization was impacted by vulnerability CVE-2026-35300 through its Oracle Cloud application environment.
It is important to note, however, that the Oracle Cloud platform in use is limited to supporting internal employee functions and does not store or process any client data. As such, the potential exposure is considered limited in scope.
The responsible team has verified that all required patches addressing this vulnerability were successfully applied during the maintenance window over the weekend of June 20th. At this time, the vulnerability is considered remediated
Vendor Advisory – Blancco Software Vulnerability (CVE‑2026‑43284)
Blancco Mobile Device Eraser (BMDE) version 5.11.1 has been officially released.This release includes the remediation of CVE-2026-43284 (“Dirty Frag”), a high-severity Linux kernel local privilege escalation vulnerability affecting certain environments.
CVE 2026 31431 and commonly referred to as “Copy Fail.”
KLDiscovery is aware of a recently disclosed vulnerability tracked as CVE 2026 31431 and commonly referred to as “Copy Fail". Our company has deployed vendor-recommended mitigation designed to reduce risk without requiring an immediate reboot. Also, KLDiscovery has no indicators of exploitation in our environment. We are continuing enhanced monitoring for indicators of exploitation.