Informational - PHP CVE Vulnerability

Incident Report for Sangoma

Monitoring

Sangoma is aware of the PHP CVE published on October 21, which addresses a vulnerability that could allow remote code execution (RCE).

As of October 22, Sangoma has reviewed internal and external systems across its extensive product portfolio that utilize PHP and has implemented the necessary upgrades and patches to address the vulnerability. Based on this review and the remediation completed, Sangoma has taken the necessary steps to mitigate the risk of remote code execution on affected systems.

If you have any questions or require additional information, please contact your Sangoma account representative or support.

Posted Oct 22, 2026 - 16:18 EDT