PHP Security Vulnerability

resolved · 29 Oct 2026, 09:18

Closed by an administrator.

monitoring · 23 Oct 2026, 12:08

Components: ORCA On 21 October a critical security vulnerability was published in PHP, a widely used web software component. We reviewed every Fuse 2 system the same day. Where PHP was in use we applied the fixed version on 22 October. This covered the Orca portal and a small number of our internal monitoring and support systems. Each one was tested and health checked once the work was done. Our voice services don't rely on PHP, so calls carried on as normal throughout.