Identified as CVE-2026-109618 and CVE-2026-109619, these vulnerabilities could, under certain conditions, allow attackers to execute unauthorised code on affected servers.
The PHP development team has released security updates to address both vulnerabilities.
What Niletech is doing
We want to reassure our clients that we are actively responding to these vulnerabilities.
We are working closely with our data centre provider to deploy the latest security patches across all servers we manage. Updates are already underway, with affected systems being prioritised and services checked following each update.
We are also monitoring official security guidance and will continue reviewing our infrastructure as further information becomes available.
What this means for our clients
For clients whose websites and applications are hosted and managed by Niletech, we are handling the necessary server-side updates. We will contact clients directly if any action is required on their part.
Security is an ongoing responsibility, and we remain committed to keeping our clients’ applications, infrastructure and data protected.
