{"id":6587,"date":"2026-10-22T23:27:02","date_gmt":"2026-10-22T23:27:02","guid":{"rendered":"https:\/\/apac.hubexo.com\/?post_type=resource&#038;p=6587"},"modified":"2026-10-23T04:37:56","modified_gmt":"2026-10-23T04:37:56","slug":"update-on-the-global-php-security-vulnerability","status":"publish","type":"resource","link":"https:\/\/apac.hubexo.com\/zh\/resource\/update-on-the-global-php-security-vulnerability\/","title":{"rendered":"Update on the global PHP security vulnerability"},"content":{"rendered":"<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"965\" height=\"584\" src=\"https:\/\/apac.hubexo.com\/wp-content\/uploads\/2026\/10\/php_notice.webp\" alt=\"\" class=\"wp-image-6588\" srcset=\"https:\/\/apac.hubexo.com\/wp-content\/uploads\/2026\/10\/php_notice.webp 965w, https:\/\/apac.hubexo.com\/wp-content\/uploads\/2026\/10\/php_notice-300x182.webp 300w, https:\/\/apac.hubexo.com\/wp-content\/uploads\/2026\/10\/php_notice-18x11.webp 18w, https:\/\/apac.hubexo.com\/wp-content\/uploads\/2026\/10\/php_notice-767x464.webp 767w, https:\/\/apac.hubexo.com\/wp-content\/uploads\/2026\/10\/php_notice-600x363.webp 600w\" sizes=\"auto, (max-width: 965px) 100vw, 965px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Last updated: 22 October 2026, 21:10 CEST<br><br>This week, a critical security vulnerability was disclosed in PHP, a programming language that runs a large share of the world\u2019s websites and web applications. National cybersecurity agencies, including the UK\u2019s NCSC and the US agency CISA, have urged organisations everywhere to act quickly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We want to reassure you that we have not been affected, and our teams are continuing to work as normal. As a precaution, we have temporarily switched off some services and are bringing them back online step by step.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What happened<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On 21 October 2026, the PHP project released a security update for two vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Under certain conditions, these flaws could let an attacker run commands on a web server running PHP without needing to log in. The vulnerabilities affect PHP across all versions, so organisations worldwide are reviewing their systems.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What we have done<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As soon as the vulnerability was disclosed, our security team:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Identified every system in our environment that uses PHP<\/li>\n\n\n\n<li>Checked those systems for any signs of unauthorised access, and found none<\/li>\n\n\n\n<li>Applied the security fixes and protective measures recommended by the PHP project<\/li>\n\n\n\n<li>Switched off some services as a precaution while we complete our checks<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What happens next<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We are bringing services back online incrementally. Each one is restored only once we have confirmed it is fully patched and secure. We will update this page as services return.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong><strong>What this means for you<\/strong><\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We have not been affected. We have found no evidence that any of our systems or customer data have been accessed or compromised.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most services are running as normal. A small number are temporarily offline as a precaution and will return shortly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Existing customer subscriptions remain intact.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You don\u2019t need to do anything.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong><strong><strong>Questions?<\/strong><\/strong><\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you have any questions or concerns, please contact your account manager or our support team at <a href=\"https:\/\/apac.hubexo.com\/zh\/contact\/\">https:\/\/apac.hubexo.com\/contact\/<\/a>. We will update this page if anything changes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We will continue to monitor the situation and update this page as more information becomes available.<\/p>","protected":false},"excerpt":{"rendered":"<p>Last updated: 22 October 2026, 21:10 CEST This week, a critical security vulnerability was disclosed in PHP, a programming language that runs a large share of the world\u2019s websites and web applications. National cybersecurity agencies, including the UK\u2019s NCSC and the US agency CISA, have urged organisations everywhere to act quickly. We want to reassure [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":6588,"parent":0,"menu_order":0,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"resource-category":[21],"class_list":["post-6587","resource","type-resource","status-publish","format-standard","has-post-thumbnail","hentry","resource-category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/resource\/6587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/resource"}],"about":[{"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/types\/resource"}],"author":[{"embeddable":true,"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/users\/10"}],"version-history":[{"count":2,"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/resource\/6587\/revisions"}],"predecessor-version":[{"id":6592,"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/resource\/6587\/revisions\/6592"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/media\/6588"}],"wp:attachment":[{"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/media?parent=6587"}],"wp:term":[{"taxonomy":"resource-category","embeddable":true,"href":"https:\/\/apac.hubexo.com\/zh\/wp-json\/wp\/v2\/resource-category?post=6587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}