We have installed all security patches for the recently announced PHP vulnerabilities on all Envoke systems.
Posted Oct 21, 2026 - 15:23 EDT
Update
The security updates are now available and are currently being tested and installed.
In the interim, some functionality restrictions are in place within the app to mitigate the risk of vulnerabilities.
We'll post another update as soon as the security update is applied. We anticipate this will be completed within two hours.
Posted Oct 21, 2026 - 14:29 EDT
Monitoring
The first security issue has been mitigated.
The second issue has been partially mitigated and is now subject to close monitoring. We are waiting for another patch, which is currently being developed and expected in the next two hours.
Posted Oct 21, 2026 - 11:43 EDT
Investigating
Two critical security vulnerabilities were recently identified in PHP, a programming language used by Envoke and countless websites and IT systems worldwide.
Our team has been monitoring the situation and is taking steps to protect Envoke. We have not detected any attacks on our systems, and no action is needed on your part.