{"id":6815,"date":"2026-10-23T07:23:47","date_gmt":"2026-10-23T06:23:47","guid":{"rendered":"https:\/\/www.construdata21.com\/?p=6815"},"modified":"2026-10-23T07:23:47","modified_gmt":"2026-10-23T06:23:47","slug":"actualizacion-sobre-la-vulnerabilidad-de-seguridad-global-de-php","status":"publish","type":"post","link":"https:\/\/hubexo.es\/en\/actualizacion-sobre-la-vulnerabilidad-de-seguridad-global-de-php\/","title":{"rendered":"Update on the global PHP security vulnerability"},"content":{"rendered":"<p style=\"text-align: left;\"><i><span data-contrast=\"auto\">Last updated: 22 October 2026, <em>21:10 CEST<\/em><\/span><\/i><\/p>\n<p style=\"text-align: left;\"><span data-contrast=\"auto\">This week, a critical security vulnerability was disclosed in PHP, a programming language that runs a large share of the world&rsquo;s websites and web applications. National cybersecurity agencies, including the UK&rsquo;s <\/span><a href=\"https:\/\/www.ncsc.gov.uk\/news\/critical-security-issue-affecting-php\"><span data-contrast=\"none\">NCSC<\/span><\/a><span data-contrast=\"auto\"> and the US agency CISA, have urged organisations everywhere to act quickly.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><span data-contrast=\"auto\">We want to reassure you that we have the situation under control.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><b><span data-contrast=\"auto\">What happened<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><span data-contrast=\"auto\">On 21 October 2026, the PHP project released a security update for two vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Under certain conditions, these flaws could let an attacker run commands on a web server running PHP without needing to log in. The vulnerabilities affect PHP across all versions, so organisations worldwide are reviewing their systems.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><b><span data-contrast=\"auto\">What we have done<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><span data-contrast=\"auto\">As soon as the vulnerability was disclosed, our security team:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Identified every system in our environment that uses PHP<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/li>\n<\/ul>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">As a precaution, briefly took some applications offline while we assessed them<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/li>\n<\/ul>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Applied the security fixes and protective measures recommended by the PHP project<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/li>\n<\/ul>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">Checked our systems for any signs of unauthorised access, and found none<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/li>\n<\/ul>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"auto\">Restored applications as each one is confirmed secure. Some remain offline as a precaution while our investigation continues.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p style=\"text-align: left;\"><b><span data-contrast=\"auto\">What this means for you<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\">Your data is safe. We have found no evidence that any customer data was accessed or compromised.<\/li>\n<\/ul>\n<ul style=\"text-align: left;\">\n<li aria-setsize=\"-1\" data-leveltext=\"&#61623;\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&#61623;&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\">You don&rsquo;t need to do anything.<\/li>\n<\/ul>\n<p style=\"text-align: left;\"><b><span data-contrast=\"auto\">Questions?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><span data-contrast=\"auto\">If you have any questions or concerns, please contact your account manager or our support team at <a href=\"mailto:contacto@construdata21.com\">contacto@construdata21.com<\/a>. We will update this page if anything changes.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><span data-contrast=\"auto\">Thank you for your trust.<\/span><br>\n<i><span data-contrast=\"auto\">The Hubexo Team<\/span><\/i><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">&nbsp;<\/span><\/p>\n<p style=\"text-align: left;\"><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: 22 October 2026, 21:10 CEST This week, a critical security vulnerability was disclosed in PHP, a programming language that runs a large share of the world&rsquo;s\u2026<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,14,12],"tags":[283],"class_list":["post-6815","post","type-post","status-publish","format-standard","hentry","category-blog","category-construdata21","category-actualidad","tag-php"],"_links":{"self":[{"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/posts\/6815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/comments?post=6815"}],"version-history":[{"count":0,"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/posts\/6815\/revisions"}],"wp:attachment":[{"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/media?parent=6815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/categories?post=6815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hubexo.es\/en\/wp-json\/wp\/v2\/tags?post=6815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}