Past Incidents

We have now successfully deployed the vendor-supplied security updates for PHP versions 8.2 through 8.5 across our platforms.

The updates have been applied successfully, and our teams will continue to monitor services closely to ensure ongoing stability and performance.

For environments running PHP versions earlier than 8.2, we are continuing to assess available mitigation measures and backport options where possible. We are working closely with our vendors and will provide further updates as more information becomes available.

We would like to thank you for your patience and understanding while this important security maintenance was completed. If there are any further developments, we will provide additional updates as required.

The PHP security update addressing the recently disclosed critical vulnerabilities has now been released.

We are currently updating PHP across our platforms in line with the vendor-provided patches and are prioritising deployment to ensure all affected systems are secured as quickly as possible.

We will continue to monitor the rollout and provide further updates as required.

Thank you for your patience and understanding.

The PHP Security Team has announced that security updates addressing two critical vulnerabilities will be released on 21 October 2026 at 15:00 BST. Details of the affected PHP versions and the associated security patches will be published at the time of release. As these updates address critical security issues, we will begin applying the necessary updates to our platforms as soon as they become available. We will continue to monitor the situation closely and provide further updates if required. Thank you for your understanding.