Critical security issue affecting PHP

Addendum Oct 23, 2026 3:22 PM BST

Our investigations remain ongoing across the wider technology estate. To date, we have not identified any affected customer-facing services.
Our approach is to apply security patches and additional protective controls wherever possible. Where affected pages, websites or services cannot be remediated or adequately protected, they will be taken offline immediately until remediation can be completed.
We continue to monitor the situation closely and maintain our established vulnerability management and patching processes to support the ongoing security and resilience of our systems and services.

Information Oct 22, 2026 8:35 AM BST

We are aware of the recently published security alerts relating to PHP and have undertaken a review of our environment to assess any potential impact to Creditsafe services.
We have not identified any customer-facing services that utilise the affected PHP software. During our review, we identified a small number of internal systems where PHP was present. Security updates have been applied to those systems to address the reported vulnerabilities.
As an additional precaution, we have implemented further firewall protections to reduce the risk of exploitation and enhance the security of our environment.
We continue to monitor the situation closely and maintain our established vulnerability management and patching processes to ensure the ongoing security and resilience of our systems and services.