Service disruption: Portfolio Manager price data and PHP vulnerability update

Information notice

Updates

Update

Dear Customer,

Further to our previous communications, we are pleased to confirm that remediation of the recently reported PHP security vulnerabilities has been completed. All affected components have been patched, and services are operating normally.
Any temporary disruption during the remediation was limited to specific affected services, and customers using those services were contacted directly.
As an additional layer of protection, our internet-facing servers are equipped with up-to-date security detection and prevention mechanisms. We continue to closely monitor for any suspicious activity and potential indicators of compromise, and we are now performing a detailed analysis of the affected servers following the completion of patching.
If you have any questions, please contact your usual Infront representative.

Thank you for your continued trust in Infront.
Infront Information Security Team

October 22, 2026 · 18:19 CEST
Information

Dear Customer,
We are proactively contacting you to share our current assessment of the recently reported PHP security vulnerabilities and the steps Infront is taking to address them.
We have reviewed all our customer-facing applications. PHP is not widely used within Infront, and our review has identified vulnerabilities only in certain minor components. Patching of these components is already underway.
Our teams are treating this work as a priority and are working diligently to complete the necessary fixes. We recognise the importance of keeping you informed and want to provide a clear picture of our findings and the remediation in progress.
We will provide further updates if there are material developments relevant to your services. If you have any questions, please contact your usual Infront representative.

Thank you for your continued trust in Infront.
Infront Information Security Team

October 22, 2026 · 11:58 CEST

← Back