Security alert: critical PHP vulnerabilities announced on October 21st, 2026

Today, October 21, 2026, PHP (The main programming language used by EVX Software) published a security advisory on two critical vulnerabilities. Both can allow remote code execution without authentication. The PHP security team states: "All PHP users are strongly encouraged to update immediately."

What we have done

• We tested compatibility for all active EVX Software versions for PHP 8.4.27
• We updated all of our servers and libraries to PHP 8.4.27, which includes the fix.

No action is required from our clients and users at this.You can find the full technical details in the PHP security advisory, and the NSA advisory here.Contact us if you have any questions related to this incident.