General article

Security alert: critical PHP vulnerabilities announced on October 21st, 2026

Keeping our systems up to date

CV

Conrado Viña

CEO & Founder

October 21, 2026

Reading time:

#

minutes

Today, October 21, 2026, PHP (The main programming language used by EVX Software) published a security advisory on two critical vulnerabilities. Both can allow remote code execution without authentication. The PHP security team states: "All PHP users are strongly encouraged to update immediately."

What we have done

We tested compatibility for all active EVX Software versions for PHP 8.4.27
We updated all of our servers and libraries to PHP 8.4.27, which includes the fix.

No action is required from our clients and users at this.You can find the full technical details in the PHP security advisory, and the NSA advisory here.

‍

Contact us if you have any questions related to this incident.

‍

Security and updates

Get the next one in your inbox

Practical project-management notes, every week. No fluff.

Thank you! You have been successfully subscribed to the EVX Software Learning Center.

Oops! Something went wrong while submitting the form.