PHP security update: majority of maintained sites now patched

Following our recent notification about PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, BlueSky has now applied the security patches to the majority of customer sites covered by a current maintenance contract.

Our engineers are continuing to work through the remaining installations. Where customers have restricted or disabled remote access, we are contacting them to arrange access and complete the updates.

If your system has not yet been patched and remote access is restricted, please contact us promptly. We will work with your IT team to agree suitable access arrangements and coordinate the update.

Although dedicated VLANs, firewalls and restricted access help reduce exposure, they do not replace the need to apply these security patches.

To help customers without a current maintenance contract address these vulnerabilities, we are offering our patching service at a reduced fee. Please contact BlueSky or your usual supplier to arrange a quotation.

BlueSky cloud services remain unaffected, and our website has already received the relevant patches.

Thank you for your cooperation as we complete this work across our customer installations.

For assistance or to arrange patching, contactsupport@bluesky-wireless.co.uk or +44 (0) 1833 600336.

Further information: CVE-2026-109618 | CVE-2026-109619.