Sangoma incident

Informational - PHP CVE Vulnerability

Ongoing since 08:18 PM UTC.

monitoring Oct 22, 2026, 08:18 PM UTC

Sangoma is aware of the PHP CVE published on October 21, which addresses a vulnerability that could allow remote code execution (RCE). As of October 22, Sangoma has reviewed internal and external systems across its extensive product portfolio that utilize PHP and has implemented the necessary upgrades and patches to address the vulnerability. Based on this review and the remediation completed, Sangoma has taken the necessary steps to mitigate the risk of remote code execution on affected systems. If you have any questions or require additional information, please contact your Sangoma account representative or support.

Started
Oct 22, 2026, 08:18 PM UTC
Resolved
Ongoing
Duration
● 5h 18m
Detected by Pingoru
Oct 22, 2026, 08:18 PM UTC

Update timeline

  1. monitoring Oct 22, 2026, 08:18 PM UTC

    Sangoma is aware of the PHP CVE published on October 21, which addresses a vulnerability that could allow remote code execution (RCE). As of October 22, Sangoma has reviewed internal and external systems across its extensive product portfolio that utilize PHP and has implemented the necessary upgrades and patches to address the vulnerability. Based on this review and the remediation completed, Sangoma has taken the necessary steps to mitigate the risk of remote code execution on affected systems. If you have any questions or require additional information, please contact your Sangoma account representative or support.

Your product runs on more than Sangoma

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →