Ongoing since 08:18 PM UTC.
Sangoma is aware of the PHP CVE published on October 21, which addresses a vulnerability that could allow remote code execution (RCE). As of October 22, Sangoma has reviewed internal and external systems across its extensive product portfolio that utilize PHP and has implemented the necessary upgrades and patches to address the vulnerability. Based on this review and the remediation completed, Sangoma has taken the necessary steps to mitigate the risk of remote code execution on affected systems. If you have any questions or require additional information, please contact your Sangoma account representative or support.
Update timeline
- monitoring Oct 22, 2026, 08:18 PM UTC
Sangoma is aware of the PHP CVE published on October 21, which addresses a vulnerability that could allow remote code execution (RCE). As of October 22, Sangoma has reviewed internal and external systems across its extensive product portfolio that utilize PHP and has implemented the necessary upgrades and patches to address the vulnerability. Based on this review and the remediation completed, Sangoma has taken the necessary steps to mitigate the risk of remote code execution on affected systems. If you have any questions or require additional information, please contact your Sangoma account representative or support.
Your product runs on more than Sangoma
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.