Yellowgrid Security Update: Critical PHP Vulnerabilities
At Yellowgrid, the security and reliability of the services we provide to our customers remain a priority.
Following recent security advisories from the UK National Cyber Security Centre (NCSC) concerning critical vulnerabilities affecting PHP, Yellowgrid immediately undertook a review of its web infrastructure and customer-facing services.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, affect certain versions of PHP, a widely used technology that powers websites and web applications.
Our Response
Upon receiving notification of the vulnerabilities, our technical team took immediate precautionary action, including temporarily taking vulnerable systems offline while remediation was undertaken.
All identified affected customer-facing telephony services had been patched by mid-morning on Friday, 23 October 2026.
All other identified affected systems have also now been patched.
We continue to review available security information and assess any potential impact.
Our commitment to security
provide remains a priority. We continue to monitor emerging security threats and apply appropriate updates and mitigations as part of our ongoing security management processes.
Have Questions or Concerns?
If you have any questions regarding this security update or concerns about your services, please contact the Yellowgrid Support Team, who will be happy to assist.
Want a feel for our products? There are more videos available on our Yellowgrid YouTube Channel.
Reseller application – Click HERE to apply
Looking for more information? No problem, contact us on 03330144340 or sales@yellowgrid.co.uk.