Critical vulnerabilities have been identified in all versions of PHP 5.x -> PHP 8.5, exploitation of these vulnerabilities can lead to unauthenticated Remote Code Execution and compromise of your systems. Further information about these vulnerabilities can be found using the links below:
Unfortunately, the vulnerabilities have been leaked in advance and there are reports of webservers being exploited in the wild currently.
Patches from PHP should be available from 2pm but there will be some variation between different distributions and repositories. The DCL team is preparing to patch all PHP installations within your environments as soon as patches become available.
If you would prefer for systems to be isolated from the internet until patches become available, please let us know immediately. Otherwise, we will confirm when all patches have been applied.
During these updates there may be some service disruption, and we will try to minimise this as much as possible.
During this time, access to monitoring via Zabbix will also be restricted, we aim to restore this as soon as possible.
If you have any queries or concerns, please contact us for more information.
Best regards,
DCL Support Team
Posted Oct 21, 2026 - 13:21 BST
Monitoring
Good Morning All,
We are aware of the 2 CVE's being released in regard to PHP version 5 and above. We are activley monitoring the status of the patches being released later today. We will privatley contact you when we will be applying them and if there is any downtime required or if any further action is required on your behalf.
Kind Regards Rhodri MM-D
Posted Oct 21, 2026 - 11:20 BST
This incident affects: Platform Applications (Monitoring).