PHP developers have informed the public about an upcoming security update that will address two critical vulnerabilities in PHP.
At this time, the technical details of the vulnerabilities have not been officially disclosed. However, according to unofficial reports, the vulnerabilities could allow remote code execution on servers, and attempts to exploit them may already be underway.
Since the early hours of this morning, the Zone team, together with our colleagues, has been working to proactively implement measures to prevent exploitation of these vulnerabilities and continuously assess incoming information.
Official information about the vulnerabilities, along with security patches from the developers, will be released at 17:00 Estonian time.
Following the instructions of CERT-EU, the European Union’s Cybersecurity Service, Zone has prepared to immediately patch affected systems once the technical details and updated software versions become available.
During this maintenance work, temporary interruptions to the availability of Zone services may occur this evening, as services will need to be restarted to apply the updated software versions.
In the highly unlikely event that we need to temporarily suspend certain services, we will provide updates at https://status.zone.eu.
Thank you for your understanding.
More information https://cert.europa.eu/publications/security-advisories/2026-018/
