Security Trust Portal
The Sprinklr platform is built with cyber security and data privacy in its design. This Trust Center provides details on Sprinklr’s extensive security and privacy program including policies, procedures, and standards.
Ford Motor Company
Heineken
LG Electronics
Honda Motor Co
Acer
PRADA
Hyundai
SimpliSafe
Superdry
UBS
PUMA
Crocs
Princess Cruises
Canon
Amtrak
LATAM Airlines
Aramex
Greggs
Security Trust Portal Updates
Sprinklr Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619
Last updated: October 21, 2026, 5:00 PM ET | Status: Assessment complete; remediation in progress
Overview
The PHP Group has published security advisories for CVE-2026-109618 and CVE-2026-109619 (PHP Security Advisory). Sprinklr’s Security and Engineering teams reviewed the advisories and completed an assessment of our systems and services.
Impact on Sprinklr
The affected PHP functionality is present on a limited number of internal endpoints that are not exposed to the internet. As of 5:00 PM ET on October 21, 2026, we have found no evidence of exploitability or exploitation.
Remediation
We will patch the affected components across all production environments in accordance with our vulnerability management program.
Ongoing monitoring
Our Security team continues to monitor Sprinklr systems and will respond to any issues that arise. We will keep investigating and addressing potential vulnerability reports as quickly as possible. We will update this article as new information becomes available.
Customer actions
No action is required from customers at this time.
Questions
Please contact your Sprinklr account team who will escalate to Security internally.
Reporting a suspected security incident to Sprinklr
If you are a Sprinklr customer and suspect a security issue or have a related concern, please notify your Sprinklr Account team or submit a support ticket by emailing tickets@sprinklr.com.
All reported security concerns are promptly escalated to Sprinklr’s Security Incident Response Team (SIRT) for review and investigation. From that point forward, the matter is managed in accordance with Sprinklr’s established Incident Response processes.
Sprinklr’s Vulnerability Disclosure Program
If you believe you have found a vulnerability in our products, please responsibly disclose this information to us through our HackOne bug bounty program. You will be recognized for your efforts if you were the first to report a valid vulnerability as per the rules of the vulnerability disclosure program.
More details about Sprinklr’s Vulnerability Disclosure Program and how to submit can be found here: https://www.sprinklr.com/responsible-disclosure/
Welcome to the Sprinklr Security & Privacy Trust Center
As an organization that is conscious of, and values, security and privacy, we are excited to announce the official launch of the Sprinklr Security & Privacy Trust Center. By using this portal, you can request access to our compliance documents, review our standardized questionnaires such as the SIG and gain a general understanding of our privacy and security posture.
Over time, our team will be making changes to this portal as we implement new tools and processes in our environment. You can use the "Subscribe" button to receive email notifications for when our team has an important update, such as if we have an updated compliance report or if we have a status update regarding a major security vulnerability that has been recently discovered.
-The Sprinklr Security Team