Industry notice: Critical vulnerabilities impacting 70% of websites (PHP)

Incident Report for Fenwick

Monitoring

A new set of PHP vulnerabilities are impacting 70% of websites on the internet. It has recently been disclosed and should be patched as a priority.

If you do run a service such as Magento, WooCommerce, WordPress, Laravel, Drupal, Joomla, or another PHP site, please get in touch with your maintainers to get it patched.

We've reviewed our products and services, and the following are *not* affected:

- Business Central (all hosting options)
- Dynamics 365
- Power Platform
- Power BI
- MobileWaste
- EasyDispatch
- Everyminute
- All Fenwick-developed products

No action is required for these products or platforms.

Details are available in the PHP security announcement: https://www.php.net/archive/2026.php#2026-10-20-1

If you have questions about any other product or service and whether it's affected, please get in touch and we can confirm whether it is affected.
Posted Oct 22, 2026 - 00:18 AEDT