October 22, 2026. On October 21st, the PHP project disclosed critical vulnerabilities. PHP is a widely used server-side language, and the flaws are in PHP itself, so any PHP website (such as vertigis.com) can be affected even if its own code is secure. The vulnerabilities can allow an attacker to run code on a server and exploit a website’s data.
After this information became public, VertiGIS immediately applied a security update to its website, upgrading our PHP to version 8.4.27. The patch was deployed as part of our ongoing commitment to protecting the systems our customers, partners, and visitors rely on.
Keeping our digital environments updated is central to our security practice. We handled this incident with the urgency and attention it required. By moving to version 8.4.27, we have closed a known PHP security issue on our website.
Our review found no evidence of impact on customer data or on website operations. We will continue to monitor our systems and apply updates as new security releases become available.
If you’re a customer of VertiGIS and have further questions, please reach out to your account manager.
Please note that some environments may still display the previous name 8.4.26, even though they have been updated.
