The official patch was released during the night and has been applied. The system is back up and running as usual.
Posted Oct 22, 2026 - 07:29 CEST
Update
Further to the earlier communications regarding the PHP vulnerability, we have implemented all currently available mitigations, including our firewall protections and the recommended measures published by PHP. At this stage, we have taken all reasonable steps to minimise our exposure, pending the release and deployment of the official patch. While these measures are expected to provide protection and the likelihood of a service disruption is considered low, we cannot eliminate the risk entirely, and the official patch remains the only definitive resolution. There are growing concerns about the potential for imminent cyberattacks, and reports indicate that a number of websites have proactively taken their services offline until the vulnerability is fully resolved. If our priority is to minimise risk as far as possible, the most conservative approach would be to temporarily shut down the affected services until the official patch can be applied. The latest update indicates that the official patch has been developed and is currently being distributed to the various operating system distributions. We are receiving reports that some distributions have already begun receiving it, which gives us reason to be optimistic that the patch may become available to us by tomorrow morning. We will continue to monitor developments closely and will prioritise applying the patch as soon as it becomes available. In the interim, a decision has been made to temporarily take the platform offline until the definitive fix can be implemented.
Posted Oct 21, 2026 - 18:19 CEST
Update
Contrary to the earlier update, the official patch has not been released merely the source code. Until the official patch is available our mitigations will remain.
Posted Oct 21, 2026 - 17:21 CEST
Update
The formal patch has been released. This is being assessed for deployment. The system will be unstable during that process.
While we await the formal patch, a mitigation patch has been applied. In both instances, a server restart is required during which time the platform will be momentarily unstable.
Posted Oct 21, 2026 - 10:55 CEST
This incident affected: Product Portal and Outbound Distribution.