PHP Vulnerabilities
On 21 October 2026, two critical security vulnerabilities affecting PHP were publicly disclosed. The PHP Project released emergency security updates on the same day to address these issues.
Impact on Our Services
Our Recruitment platform uses PHP and has been fully updated with the vendor's emergency security fixes across all environments.
Our HR, Payroll, and Learning platforms do not use PHP and are not affected by these vulnerabilities.
Actions Taken
- Emergency PHP security updates were reviewed and applied on 21 October 2026.
- All Recruitment environments have been patched.
- Ongoing monitoring is in place for any further vendor updates or security advisories.
- Any additional security releases will be assessed and deployed as required.
Customer Impact
At this time, there is no action required from customers.
Frequently Asked Questions
+ Are your systems affected by the PHP vulnerabilities disclosed on 21 October 2026?
Our Recruitment platform was potentially affected because it uses PHP. Security patches were applied across all environments on the day the vulnerabilities were disclosed.
+ Which products are affected?
Only the Recruitment platform uses PHP.
+ Which products are not affected?
Our HR, Payroll, and Learning platforms do not use PHP and are not impacted by these vulnerabilities.
+ Do customers need to take any action?
No. The necessary security updates have already been applied by our engineering team.
+ Will you continue to monitor the situation?
Yes. We are actively monitoring for any additional PHP security releases and will apply updates promptly when required.