Status: Remediation completed on Zen Systems' private hosting infrastructure

Zen Systems is aware of the recently reported PHP security vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619.

Following their disclosure, our technical team undertook a review of our hosting infrastructure and managed services to assess potential exposure and implement appropriate security measures.

Our Response

Website and Helpdesk Hosting

On the evening of 21 October 2026, Zen Systems applied security updates to our privately hosted Virtual Private Servers (VPSs), which support our corporate website and customer helpdesk.

These updates were undertaken promptly in response to the reported vulnerabilities as part of our ongoing commitment to maintaining the security and integrity of our systems.

Managed 3CX Phone Systems

We have also assessed the potential impact of these vulnerabilities on the 3CX phone systems we manage.

The standard 3CX platform does not rely on PHP for its core application functionality and is therefore not expected to be directly affected by these vulnerabilities.

Our technical team has undertaken server-level verification on managed 3CX installations, including checks of installed software packages, PHP executables and running processes.

Checks completed to date have identified no affected PHP components on the 3CX systems examined.

Based on these findings, we do not currently anticipate that PHP-specific remediation will be necessary for standard 3CX installations.

Do Customers Need to Take Action?

Customers using Zen Systems' managed 3CX services do not currently need to take any action in relation to these specific PHP vulnerabilities.

We will continue to assess our managed infrastructure and advise individual customers should any further action become necessary.

Customers operating their own PHP-based websites or applications should ensure that their hosting providers have assessed the vulnerabilities and applied the appropriate security updates.

Our Ongoing Commitment to Security

Protecting our customers' systems and data remains a priority for Zen Systems.

We continuously monitor relevant security advisories, assess emerging vulnerabilities and implement appropriate measures to minimise risks across the services we provide.

Where security issues require customer intervention, we will communicate directly with affected organisations.

For further information or assistance, please contact the Zen Systems support team.

Zen Systems Ltd
22 October 2026