Today, the PHP Security Team has announced two critical security vulnerabilities, with security updates expected shortly. Learn more here.
Catalyst IT is aware of these vulnerabilities and is treating them as a high priority. Our team is actively preparing mitigations and will deploy security patches across our managed hosting environments as soon as they become available.
No action is required from our clients.
We are proactively managing this issue and will provide further updates if necessary.
22 October 2026 update:
The Team have been working through the night and are continuing to deploy patches and monitoring our logs and SIEMS closely.
Further updates will be added here as they become available.
23 October 2026 update:
And that’s a wrap! Very proud of the team, huge effort to get everything critical patched so quickly.
Our inbox is overflowing with messages like the below from our clients, saying that we were the first vendor to patch their systems. Thanks very much again to our amazing team!
I would like to thank you and the wider Catalyst team for working around the clock to get us back up and running securely, it is most appreciated.
A huge thank you to you and your team for your efficient actions today to patch our systems. Everyone was super impressed. You were the first of all of our vendors to complete the tasks.
Just wanted to pass on a thank you to the whole team for the time and effort put in yesterday. Our infosec team and upper management were able to track of everything thanks to your updates and we were able to assure them we were in good hands. Really appreciate it.
Catalyst IT manages hundreds of PHP-based systems worldwide, taking full technical responsibility for our clients’ sites so they can focus on their strategic priorities with confidence and peace of mind.
