22.10.2026
Statement on the PHP vulnerabilities (October 2026)
Software Improvement Group
Software Improvement Group assessed its exposure to the critical PHP vulnerabilities.
Sigrid® Core, Sigrid® Axis, and other customer services are not affected. Our website was patched on 21 October.
Amsterdam, 22 October 2026–Software Improvement Group (SIG) has assessed its exposure to the critical PHP vulnerabilities addressed by the PHP security release of 21 October 2026.
- Sigrid and the services SIG delivers to customers do not run on PHP and are not affected.
- SIG’s commercial website used PHP and was patched on 21 October.
- One supporting component that holds no customer source code also used PHP. We took it offline as a precaution on 21 October and completed the patch on the morning of 22 October.
We continue to monitor the situation. For questions, please contact your SIG representative directly or reach out to us.