Update: 22 October 2026, 01:00 BST
All Niletech-managed servers and client websites have now been updated, with the relevant PHP security patches applied.
We've also completed post-update checks to ensure everything is running as expected.
Identified as CVE-2026-109618 and CVE-2026-109619, these vulnerabilities could, under certain conditions, allow attackers to execute unauthorised code on affected servers.
The PHP development team has released security updates to address both vulnerabilities.
What Niletech is doing
We want to reassure our clients that we are actively responding to these vulnerabilities.
We are working closely with our data centre provider to deploy the latest security patches across all servers we manage. Updates are already underway, with affected systems being prioritised and services checked following each update.
We are also monitoring official security guidance and will continue reviewing our infrastructure as further information becomes available.
What this means for our clients
For clients whose websites and applications are hosted and managed by Niletech, we are handling the necessary server-side updates. We will contact clients directly if any action is required on their part.
Security is an ongoing responsibility, and we remain committed to keeping our clients’ applications, infrastructure and data protected.
