--- title: "Security update: critical PHP vulnerabilities" description: Kunskapsbank --- [Skip to content](https://hs.pythagoras.se/kunskapsbank-en/säkerhetsuppdatering-kritiska-sårbarheter-i-php#main-content) - [English](https://hs.pythagoras.se/kunskapsbank-en/s%C3%A4kerhetsuppdatering-kritiska-s%C3%A5rbarheter-i-php) - [Svenska](https://kundportal.pythagoras.se/artiklar/säkerhetsuppdatering-kritiska-sårbarheter-i-php) English Show submenu for translations [Supportärenden](https://kundportal.pythagoras.se/support?hsLang=en) ![pythagoras\_grey\_red\_logotype\_2](https://hs.pythagoras.se/hs-fs/hubfs/pythagoras_grey_red_logotype_2.png?width=300&height=96&name=pythagoras_grey_red_logotype_2.png) Open main navigation Close main navigation - - [English](https://hs.pythagoras.se/kunskapsbank-en/s%C3%A4kerhetsuppdatering-kritiska-s%C3%A5rbarheter-i-php) - [Svenska](https://kundportal.pythagoras.se/artiklar/säkerhetsuppdatering-kritiska-sårbarheter-i-php) English Show submenu for translations - [Supportärenden](https://kundportal.pythagoras.se/support) Vad letar du efter? - There are no suggestions because the search field is empty. 1. [Kunskapsbank](https://hs.pythagoras.se/kunskapsbank-en?hsLang=en) 2. [News](https://hs.pythagoras.se/kunskapsbank-en/news?hsLang=en) October 22, 2026 # Security update: critical PHP vulnerabilities ## CVE-2026-109618 and CVE-2026-109619 ### Summary The Pythagoras SaaS service contains no PHP and is not affected by these vulnerabilities. We have also reviewed our supply chain and can confirm that the systems and services our suppliers deliver to us do not affect Pythagoras or the services we deliver to our customers. We have not identified any impact on the service. You do not need to take any action. Background On 21 October, the PHP project released fixes for two critical vulnerabilities that let an attacker run code on a server remotely. Exploitation has been reported. PHP is widely used across the internet, and some vendors took services offline as a precaution while they applied the fixes. ### Our assessment We have checked the Pythagoras product and found no PHP in it. We have also reviewed our supply chain, including the suppliers involved in delivering the service to you. Based on that review, we can confirm that none of the systems or services they provide to us affect Pythagoras or the services we deliver to our customers. What this means for you as a customer You do not need to change passwords or install anything because of this. If you run your own systems that use PHP, we recommend updating to a fixed version in line with guidance from the PHP project. ### Ongoing monitoring We continue to follow developments and will update this page if our assessment changes. If you have questions, contact your Pythagoras representant or our business support.   **Björn Asklöf** CISO Pythagoras AB - [News](https://hs.pythagoras.se/kunskapsbank-en/news?hsLang=en#main-content) - [Energy](https://hs.pythagoras.se/kunskapsbank-en/news?hsLang=en#energy) - [Case management](https://hs.pythagoras.se/kunskapsbank-en/news?hsLang=en#case-management) - [Planned maintenance](https://hs.pythagoras.se/kunskapsbank-en/news?hsLang=en#planned-maintenance) - [Planned service disruptions](https://hs.pythagoras.se/kunskapsbank-en/planned-service-disruptions?hsLang=en) - [Current service disruptions](https://hs.pythagoras.se/kunskapsbank-en/current-service-disruptions?hsLang=en) - [Release notes](https://hs.pythagoras.se/kunskapsbank-en/release-notes?hsLang=en#main-content) - [2026](https://hs.pythagoras.se/kunskapsbank-en/release-notes?hsLang=en#2026) - [Manuals & FAQ](https://hs.pythagoras.se/kunskapsbank-en/manuals-faq?hsLang=en) - [Webinar](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#main-content) - [Product releases](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#product-releases) - [Models](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#models) - [Case management](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#case-management) - [Energy](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#energy) - [Planned maintenance](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#planned-maintenance) - [Contract](https://hs.pythagoras.se/kunskapsbank-en/webinar?hsLang=en#contract) - [Offers](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#main-content) - [Case management](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#case-management) - [Energy](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#energy) - [Models](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#models) - [Planned maintenance](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#planned-maintenance) - [Contratcs](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#contratcs) - [Cleaning](https://hs.pythagoras.se/kunskapsbank-en/offers?hsLang=en#cleaning) [![Pythagoras\_\_white-red-small](https://hs.pythagoras.se/hubfs/Pythagoras__white-red-small.svg "Pythagoras__white-red-small")](https://www.pythagoras.se) Söder Mälarstrand 27B 118 25 Stockholm Sweden *Copyright © 2026 Pythagoras AB* hello@pythagoras.se 08-760 00 10