WYS | PHP Group has reported two critical vulnerabilities – we recommend isolating WYS Platform from the internet until an update is available

PHP Group has reported two critical vulnerabilities – we recommend isolating WYS Platform from the internet until an update is available

PHP Group reported two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) on 21 October 2026. According to PHP, fixed versions are expected to be released later the same day.

The WYS Platform utilizes PHP software as part of its technology stack. We recommend isolating the WYS Platform from the Internet until an updated version of the Platform becomes available, which is expected within the next few days.

Additional information about the vulnerabilities is available in the advisory published by Traficom’s National Cyber Security Center (in Finnish): https://kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-37

Should you have any questions, please do not hesitate to contact us directly via email helpdesk[at]wys.fi.

Are you already taking advantage of the shared potential offered by different security systems?

Combining different security systems into one logical entity makes their utilization more efficient

PHP Group has reported two critical vulnerabilities – we recommend isolating WYS Platform from the internet until an update is available

PHP Group has reported two critical vulnerabilities – we recommend isolating WYS Platform from the internet until an update is available

Address

Sales

General