Let’s talk about something that was probably not top of mind until recently: PHP
Related to the issues around PHP. one of our clients asked us a simple question:
“Is there any PHP in our integration landscape, and is it patched?”
A fair question. And actually, a pretty smart one.
First some context
On 21 October 2026, the PHP project released fixes for two critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
Both received a severity score of 9.2 out of 10. In security terms, that’s definitely something you don’t want to ignore.
Under certain conditions, these vulnerabilities could allow attackers to run malicious code remotely on affected servers.
The good news? Fixes are available.
The updated PHP versions are:
- PHP 8.5.12
- PHP 8.4.27
- PHP 8.3.36
- PHP 8.2.35
Still running PHP 8.1 or older? Those versions no longer receive regular security updates, so it’s time to discuss an upgrade with your IT team or hosting provider.
But what does PHP have to do with integrations?
More than you might think.
When we talk about integrations, we usually talk about connecting systems like Shopify, Salesforce, Hubspot, ERPs or other business applications.
But behind those systems, there’s often a whole world of technology quietly doing its job.
PHP is one of those technologies. It powers websites, webshops, portals and custom applications. And some of those applications might be connected to your other business systems.
So even if your integration platform doesn’t use PHP, a system connected to it might.
Think of it like a team project. Everything might be working perfectly, but if one team member hasn’t updated their part, it could still cause problems for everyone else.
That’s why it’s important to look beyond just the integrations themselves.
Three questions worth asking today
No need to panic or start digging through lines of code. Just start with three simple questions:
1. Where is PHP running?
On your own servers? At a hosting provider? Or perhaps on a website managed by an external agency?
2. Are we running an updated version?
Check which PHP versions are being used and whether the necessary security fixes have been installed.
3. Who’s taking care of the updates?
Your internal IT team? Your hosting provider? An external supplier? Make sure someone knows it’s their responsibility.
Can’t answer these questions within a day? That’s already a useful discovery.
It might be time to give your hosting partner or software supplier a call.
Better connected. Better prepared.
At ZangaBee, we love making systems work together. That’s what we do.
But connecting systems isn’t just about getting data from A to B. It’s also about understanding what’s happening behind the scenes and keeping security in mind along the way.
The more connected your business becomes, the more important it is to know what’s running in your IT landscape.
So, when was the last time you checked?
If you’re unsure how your systems are connected or what this means for your integration landscape, feel free to reach out to ZangaBee. We’re always happy to think along.
