Statement Regarding Global PHP Security Vulnerabilities

STUDIO ORRIS | OFFICIAL SECURITY ADVISORY

22 October 2026 | Client & Partner Communication

Statement Regarding Global PHP Security Vulnerabilities

An important security update for our valued clients, partners and stakeholders.

Studio Orris is aware of the critical PHP security vulnerabilities disclosed on 21 October 2026, identified as CVE-2026-109618 and CVE-2026-109619.

These vulnerabilities have raised significant cybersecurity concerns internationally, with organisations and technology providers reviewing their digital infrastructure and implementing necessary security measures.

In response to these developments, Studio Orris wishes to provide a formal update and reassurance to our clients and partners.

Studio Orris Systems Remain Unaffected

We confirm that Studio Orris-managed websites, systems, hosting environments and databases are not impacted by the recently identified PHP vulnerabilities.

Our website development solutions utilise modern technology frameworks that do not depend on PHP as their primary application programming language.

Based on our current infrastructure arrangements and confirmed security status, these particular PHP vulnerabilities do not affect the digital platforms managed by Studio Orris.

Clients and partners can continue using their Studio Orris-managed digital services with confidence. No additional action is required from clients in response to these specific vulnerabilities.

Our Commitment to Digital Security

At Studio Orris, protecting our clients' digital assets and maintaining the reliability of our services remain fundamental priorities.

Our approach to digital infrastructure management includes:

• Modern Technology: Utilising contemporary development frameworks and established technology platforms.

• Secure Infrastructure: Coordinating website hosting, database services and infrastructure management with trusted providers.

• Ongoing Monitoring: Remaining informed of emerging cybersecurity threats and relevant security advisories.

• Security Maintenance: Reviewing configurations, platform dependencies and security requirements as appropriate.

• Data Protection: Prioritising responsible information management and appropriate protective measures.

• Client Transparency: Providing clear and timely communications whenever relevant security developments arise.

We recognise that cybersecurity is an ongoing responsibility, and we remain committed to maintaining appropriate safeguards across the digital services under our management.

A Message to Our Clients & Partners

Your trust, security and confidence remain central to everything we do.

We understand the importance of maintaining reliable, professionally managed digital infrastructure, particularly during periods of heightened cybersecurity awareness.

Studio Orris remains committed to providing dependable digital solutions and ensuring our clients receive appropriate support as the technology landscape continues to evolve.

We will continue monitoring relevant cybersecurity developments and working with our technology providers to maintain appropriate security standards.

We sincerely thank our clients, partners and stakeholders for their continued confidence and partnership.

Further Information

For additional information regarding your Studio Orris-managed website or digital services, please contact our team through your usual communication channels.

For official technical information regarding the recent PHP security vulnerabilities, please refer to the PHP Security Advisory .

Studio Orris

Brand Strategy · Digital Experiences · People & Culture

Brisbane · Sydney · Melbourne · Taipei

Official Client & Partner Communication | 22 October 2026