VentraIP is currently experiencing a major incident, which began 9h ago. The vendor's full update timeline is below.
Update timeline
- identified Oct 21, 2026, 03:04 AM UTC
The PHP security team have advised of an upcoming critical security release scheduled for Wednesday, October 21, 2026, at 14:00 UTC (Thursday, October 22, 2026, at 1:00 am AEDT). This release covers two critical vulnerabilities, both rated 9.2 out of 10 on the CVSS scale. Full details have not yet been released regarding the versions impacted or the nature of the vulnerabilities, only their critical nature. More details on the impacted versions and recommended steps will be available as soon as we have more information. You can see the official PHP team's post here: https://www.php.net/archive/2026.php#2026-10-20-1 Once we have confirmation that a patch has been released, we will be applying it ASAP.