In October 2026, serious security vulnerabilities in the PHP programming language were published, which could potentially allow attackers to gain control over affected web servers. Exploitation attempts have been observed worldwide since October 17, 2026.
Our Measures
- October 21: In the morning, we implemented a protective configuration change on all PHP servers and installed the security update from the PHP project on the same day.
- October 24: We have also secured all systems against a related subsequent vulnerability.
- Subsequently: We forensically examined every server running PHP for traces of a successful attack.
Result
We have found no evidence that our systems or your data have been compromised. As with almost all providers on the Internet, automated scanners attempted to exploit the vulnerabilities on our servers. None of these attempts were successful.
Further Steps
We are further expanding our monitoring and log retention so that we can detect and investigate incidents of this type even more reliably in the future.
If you have any questions, you can reach us at support@saasweb.net.
