PHP Security Update
You may have seen recent news about two security vulnerabilities in PHP, a programming language used by a large share of websites and software applications worldwide. The vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed on 21 October 2026 and affect organisations across many industries.
We want to reassure you about the steps we’ve taken to protect our systems and your data.
What we’ve done
As soon as we became aware of the issue, we put additional security measures in place to protect our websites and platforms, including neurohub, even before official fixes were released. We have since updated PHP across all our servers with the latest security patches, which address both vulnerabilities.
Third-party software
We also supply software products from other providers. How these products are affected may depend on the provider, how the software is hosted and how it’s deployed. If you use any third-party software supplied by us, we recommend checking with the provider to confirm whether any updates or actions are needed. We’re happy to help you identify the right contact.
What happens next
We’ll continue to monitor the situation closely and take any further steps needed to keep our systems secure. Creating a safe space for everyone we work with, through our services and our digital platforms, remains our priority.
If you have any questions, please contact your Account Manager or email us at hello@neurobox.co.uk
Related readings
