PHP security announcement update
22 October
3.55am - Update
Silverstripe Cloud access has been restored.
3.45am - Update
Following the publication of the PHP security release, we are working to provide comprehensive information regarding these vulnerabilities, the protections in place, and any additional recommended actions for customers. Protecting our customers remains our highest priority.
For customers with a Silverstripe Web Application Firewall (WAF) service, protection against known exploitation patterns is in place. This provides an additional layer of protection while PHP updates are assessed and deployed. It does not replace the need to apply those updates.
Our teams are continuing to closely monitor the situation. We will continue to update here.
21 October
4.40pm - Scheduled release on October 22 and patching plan
The PHP security team has scheduled a security release for the early hours of Thursday 22 October 2026 (New Zealand time). Full details, including affected versions and available patches, are expected with the release.
Our team will be actively monitoring the release and preparing to assess and test the patches as soon as they become available. Safeguarding the security and stability of our clients' sites is our number one priority.
We will continue to provide updates on the situation, along with our response, and any actions required from you on this page.
Ngā mihi.
3.04pm - Dashboard Unavailability
In light of the PHP vulnerabilities announced today, we have taken Silverstripe Cloud Dashboard offline to minimise potential impact. Additionally, this means the Silverstripe Search dashboard and Graylog are unavailable.
To raise a ticket, please use ops@silverstripe.com(opens in new tab) which is being actively monitored by our Platform Support team.
Thank you for your continued patience.
2.58pm - PHP Security Announcement and Upcoming Patches
We are aware of the upcoming security patch for critical PHP vulnerabilities announced today. Our number one priority is the security and stability of our clients' sites. Our team is actively monitoring the release and is prepared to test and apply the fix as soon as it becomes available. We will notify all impacted customers as soon as the patches are released and assessed.
Please reach out to your Client Lead if you have any questions.
Thank you for your patience.
Latest news
Did anything spark your interest?
Have you got an awesome new idea or project that you want to talk about? We're here to talk you through it.