PHP Security Issues - October 2026

We would like to update BridgeStation subscribers regarding recent industry-wide disclosures concerning the PHP runtime engine.


BridgeStation is built on the ASP.NET framework and does not execute or rely on PHP. So the sites you use to access BridgeStation are not affected by this global issue.


More widely, we do use PHP for other websites on our platform. So we immediately updated the server's PHP runtime to the fully patched version on the day of release (Wednesday 21 October 2026).


Coupled with our edge firewall filtering and active endpoint scanning, BridgeStation remained completely secure and unaffected throughout. 


We continue to monitor the platform for vulnerabilities using the monitoring tools we already have in place.