23/10/2026
PHP Security Update
Due to the roll out of the latest PHP security update, AC Leigh has reached out to SALTO HQ for an official statement to ensure our client’s security systems are working as expected:
“SALTO is aware of the recently disclosed critical PHP vulnerabilities.
As soon as the issue was identified, we initiated the corresponding assessment and remediation activities across our environments.
The identified affected components have been addressed and the relevant security updates have been already applied.
Our SOC has not identified any suspicious activity associated with these vulnerabilities, and we continue to actively monitor the situation.
We will provide further updates if required.” – SALTO HQ
What does this mean for your SALTO security?
If you are using ProAccess SPACE, then you are NOT affected by the PHP security update. If you are using SALTO KS or Homelok then please refer back to the above statement from SALTO HQ.
If you have any further questions, please don’t hesitate to contact our security team at [email protected]
What is the PHP security update and why was it rolled out?
According to the UK’s National Cyber Security Centre (NCSC),
“PHP has published a security update to address a critical security issue that may allow attackers to execute commands on any web server running PHP.
PHP (PHP Hypertext Preprocessor) is a widely used server-side scripting language designed for web development. It runs on a web server to generate dynamic page content, interact with databases, and handle backend application logic before delivering the final HTML output to a user's browser. PHP is also used in a range of other products.”
You can read the full article “Critical security issue affecting PHP” by the NCSC here:
https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
