Digital security
PHP vulnerabilities quickly patched on October 21
On October 21, 2026, the PHP Foundation issued a warning about two critical vulnerabilities in PHP. AEB applied the patches immediately.
22.10.2026
Where is PHP used?
PHP is used worldwide in numerous web applications and products. The source code is found not only in traditional PHP websites but also in components of products such as TYPO3.
At AEB, primarily the company’s websites were affected. AEB’s cloud-based solutions, however, are not based on PHP and were therefore never subject to the reported security risks.
How were the discovered security vulnerabilities assessed?
In the PHP news the critical vulnerabilities CVE-2026-109618 and CVE-2026-109619 were rated by means of the Common Vulnerability Scoring System Version 4.0 (CVSS) with a score of 9.2 out of 10. This score indicates the technical severity of an IT security vulnerability, based on standardized metrics such as attack vector, complexity, required privileges, user interaction, and impact on confidentiality, integrity, and availability.
Security at AEB
Availability, confidentiality, integrity – these are AEB's top security objectives. We provide information on this in our Trust Center.
AEB immediately deployed the security update
Just a few minutes after the security update was released, all PHP-based websites and applications at AEB were patched. No anomalies were detected.
This procedure is in line with AEB’s vulnerability management policy; further information can be found in the AEB Trust Center: Security at AEB.
Similar content
CybersecuritygradientOctober 09, 2026Post-quantum: Why crypto agility is so important
Quantum computers are considered the next technological revolution. However, they pose a challenge for IT security: the transition to “post-quantum cryptography.”
CO₂ border adjustmentvioletJune 15, 2026CBAM – what importers need to know right now
The Carbon Border Adjustment Mechanism (CBAM) obliges EU companies to purchase certificates for emissions-intensive imports from 2027. Starting 2028, 180 additional products will be affected. The UK is following suit. An overview.
AI hackathongradientMay 28, 2026Shaping AI instead of reacting to it
AI is evolving not just day by day, but almost hour by hour. At this point, no one is debating whether to use AI anymore – only how to use it – and that goes for us at AEB as well. So what happens when a group of people takes a day to not just react to these changes, but to actively shape them?
InterviewvioletFebruary 20, 2026AI in customs 2026: Why automation needs more than just artificial intelligence
Daniel Schüler, AI Strategist at AEB, explains why AI alone does not solve structural problems and why data quality, process clarity and strategic automation are crucial.
