Impartner incident

PHP Web Server Vulnerability Update

Resolved on October 22, 2026, affecting News OnDemand and News OnDemand (News OnDemand — UK Data Center).

resolved Oct 22, 2026, 04:18 PM UTC

Impartner customers, A widely published vulnerability in the website hosting software PHP was discovered yesterday, October 21st. This is a serious vulnerability that allows attackers to take control of a web server. We have received questions from our customers how this affects the security of Impartner websites. This does not affect Impartner customers of PX, PRM, portals, or any other Impartner products, with the exception of a small number of our customers using our legacy News on Demand product. The new News on Demand product integrated within PX is not affected. Our security team has blocked this PHP vulnerability, so that News on Demand is safe for use and secured against attack. We have examined the websites and logging and found no breaches or exploits. An upgrade path to the new version of News on Demand is always available, with more features and the latest security; your account representative can give you details on this preferred path. Any updates to this PHP vulnerability will be published to our status page, status.impartner.com. Any specific questions can be directed to your CSM.

Started
Oct 22, 2026, 04:18 PM UTC
Resolved
Oct 22, 2026, 04:18 PM UTC
Duration
–
Detected by Pingoru
Oct 22, 2026, 04:18 PM UTC

Affected components

News OnDemandNews OnDemand (News OnDemand — UK Data Center)

Update timeline

  1. resolved Oct 22, 2026, 04:18 PM UTC

    Impartner customers, A widely published vulnerability in the website hosting software PHP was discovered yesterday, October 21st. This is a serious vulnerability that allows attackers to take control of a web server. We have received questions from our customers how this affects the security of Impartner websites. This does not affect Impartner customers of PX, PRM, portals, or any other Impartner products, with the exception of a small number of our customers using our legacy News on Demand product. The new News on Demand product integrated within PX is not affected. Our security team has blocked this PHP vulnerability, so that News on Demand is safe for use and secured against attack. We have examined the websites and logging and found no breaches or exploits. An upgrade path to the new version of News on Demand is always available, with more features and the latest security; your account representative can give you details on this preferred path. Any updates to this PHP vulnerability will be published to our status page, status.impartner.com. Any specific questions can be directed to your CSM.

Your product runs on more than Impartner

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →