On 21 October 2026, critical security vulnerabilities were disclosed in PHP — the programming language on which a large proportion of all websites and web applications run.
We installed the updates available for our systems that same evening and overnight. In isolated cases, this may have caused brief interruptions in availability; the affected services are running normally again.
Status as of 22 October 2026: Matching updates are still pending for some third-party components. We will apply them as soon as the vendors release them; we are following developments closely.
For the systems we manage, we take care of the updates. If you run a self-managed instance, please check the update status of your applications. Should anything be required on our side for one of your services, we will contact you directly.
We will keep you informed about the progress of the work.