Critical PHP Security Vulnerabilities - Our Response

22nd October, 2026 1:30AM

On 21 October 2026, the PHP development team released emergency security updates addressing two critical vulnerabilities affecting PHP, a widely used technology powering websites and online services around the world.

The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, attracted significant international attention due to their potential to allow unauthorised access to affected systems.

At fd Network, protecting the security, reliability and availability of our services is an ongoing priority.

Following the release of the security updates, our technical team deployed the relevant patches across our affected infrastructure within just 12 minutes of their availability.

Our response included reviewing the security advisories, applying the necessary updates and verifying the continued operation of our services.

We are pleased to advise that our systems have been updated, our services remain operational, and we have identified no indication of compromise associated with these vulnerabilities.

Security incidents affecting widely used technologies are an unfortunate reality of today's interconnected world. While no organisation can eliminate every potential vulnerability, maintaining awareness, responding promptly and applying appropriate security controls are fundamental to protecting the services our customers depend upon.

This incident reinforces the importance of proactive system maintenance, timely security updates and ongoing monitoring — practices that remain central to how fd Network operates.

No action is required from customers using our managed services in relation to this incident.

If you have any questions or concerns, please don't hesitate to contact the fd Network on 1300 884 386 or reception@fdnetwork.com.au

• Critical PHP Security Vulnerabilities - Our Response

  A quick update on the fd Network response to the PHP Vulnerabilities which have made headlines - When these critical PHP vulnerabilities made headlines worldwide, our team was already on the case. Within just 12 minutes of security updates becoming available, our servers were patched, our services remained operational, and our customers protected.

  Find out more
• Votapex kicks off a successful DCM Season

  That’s a wrap! After launching at the Toastmasters International Convention in Philadelphia this August, Votapex staff have supported 12 Districts to deliver a successful District Council Meeting #1 for 2025-2026 across five regions in four continents.

  Find out more
• Introducing the Singapore Server

  The fd Network is introducing server capacity in Singapore to deliver fd Network Services for Asia Based Customers.

  Find out more
• Introducing the Johannesburg Server

  The fd Network is introducing server capacity in Johannesburg to deliver fd Network Services for African Based Customers.

  Find out more