Announcement: restricted access to panels due to PHP vulnerabilities

Announcement: restricted access to panels due to PHP vulnerabilities Wednesday 21st October 2026 14:07:00

As you may have read in the news, there are currently serious vulnerabilities in PHP, a widely used programming language for web applications. Although we are phasing out PHP, we still use it in a few essential parts of our web applications.

As a precaution, we will restrict access to our panels to known IP addresses. This applies to the Provider Panel, the Company Panel and the UC Panel, and therefore also to Webcalls.

In doing so, we are following the advice of CERT-EU to shield internet-facing web applications until a fix is available. Many other organizations are taking similar measures.

We are currently working on the implementation. As soon as the measure is active, we will announce it on our status page.

Who keeps access?

IP addresses from which there has been an active session on one of the panels in the past 7 days.

IP addresses on which a device is registered.

The panels will not be reachable from any other IP address. In that case, you may also be unable to change settings.

Following the serious vulnerabilities in PHP, which you may have seen in the news, we previously restricted access to our panels to known IP addresses. We did this on the advice of CERT-EU.

As soon as the patched PHP version is released, we will test it in our test and acceptance environments. We will do this as quickly as possible. If everything works as expected, we will roll out the update to production.

What will you notice?

While we update the production environment, the panels and Webcalls may be briefly unavailable. No other services are affected, including desk phones and the Qaller app. The access restriction we put in place earlier remains in effect until further notice.

We will keep you updated on this status page and let you know as soon as the update is complete.

Posted 6 hours ago by Filip Muylle