News

SECURITY: PHP Vulnerability


PHP is not used on this website

On 21st October 2026, the NCSC published an alert on two critical remote code execution vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619), known as PHP2Shell. NHS England issued a High severity NHS England Cyber Alert (CC-4875) on the same day.

PHP is not used on this website, only Microsoft's Active Server Pages (ASP). We have done an extra check for any third party PHP vulnerabilities on our webserver and that also found no issue.

K P M D   ( I T   S o l u t i o n s )   L t d

Wed, 21 October 2026

Version: 1.02