At MR Systems, protecting our customers’ information and maintaining the security of our online services are among our highest priorities.
On 21 October 2026, two critical security vulnerabilities affecting PHP, a widely used technology powering millions of websites and online applications, were publicly disclosed.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could potentially allow unauthorised access to affected servers.
Following the announcement, our technical team promptly reviewed our systems and applied the necessary security updates to address both vulnerabilities.
Our affected PHP installations have been updated to versions containing the official security fixes.
Our systems have been updated to protect against these vulnerabilities.
The security updates address the identified weaknesses and help ensure that our customers’ information remains protected.
We continue to monitor our infrastructure and follow established security practices to safeguard our services.
No action is required from our customers.
We have handled the necessary updates on our side, and our services remain available as normal.
For additional technical details, please refer to the UK National Cyber Security Centre’s advisory:
Critical security issue affecting PHP
https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
Thank you for your continued trust in MR Systems.
The MR Systems Team