22/10/2026
Client alert: As you may have heard in the news there has been an alert about a recently discovered vulnerability in the PHP programming language. The standard procedure for all vulnerabilities is for the researcher who discovers it to notify the developers and give them time to produce a fix before releasing the news. In this instance somebody else discovered the vulnerability before the fix was produced and released the news of it early. We were notified that there was a flaw at the beginning of the week and told the fix would be released on October the 21st.
As of midday on the 21st October all our servers were either patched using the official PHP patches, or had a firewall mitigation in place while the patches were rolled out meaning that our servers were already fixed before the news alerts hit the mainstream media.