Security Notice: Precautionary Measures Regarding PHP Vulnerabilities

Update timeline

1. investigating Oct 21, 2026, 01:24 PM UTC

   Dstny has been made aware of two recently disclosed critical security vulnerabilities affecting PHP, a programming language commonly used for web based applications. As a precautionary security measure, Dstny has temporarily restricted access to certain applications and services that may be affected while our technical teams assess the exposure and implement the appropriate security updates and mitigations. This action is preventive. At this time, we have no indication that these vulnerabilities have been successfully exploited as part of this event. The temporary unavailability of affected services is a deliberate measure to minimize potential security risk while remediation activities are carried out. Dstny continues to monitor developments closely and will restore affected services once the necessary security measures have been implemented and validated. Dstny Support

2. investigating Oct 21, 2026, 01:25 PM UTC

   We are continuing to investigate this issue.

3. investigating Oct 21, 2026, 04:48 PM UTC

   Services not impacted As stated in our previous update, we have no indication that the vulnerabilities involved in this event were successfully exploited. We can confirm that the following services are not affected by these vulnerabilities and remained fully operational throughout: Core SMP Connect Me Analytics Call Recording Call2Teams Softphone BMP VoipCube CRM Connect Teams Connect Zone We will continue to monitor the situation and will share further updates here as soon as more information is available.

4. monitoring Oct 22, 2026, 01:31 PM UTC

   Moving to monitoring As stated in our previous updates, we have no indication that the vulnerabilities involved in this event were successfully exploited. We can confirm that we still see no impact on our services. We are therefore moving this incident to the monitoring state. We will continue to monitor the situation and will post here if anything changes. If you have questions in the meantime, please contact Dstny Support.

5. resolved Oct 26, 2026, 10:04 AM UTC

   Dstny was made aware of two recently disclosed critical security vulnerabilities affecting PHP, a programming language commonly used for web-based applications. As a precautionary measure, we temporarily restricted access to certain applications and services while our technical teams assessed the exposure and implemented the appropriate security updates and mitigations. Outcome We found no indication that the vulnerabilities were successfully exploited at any point during this event, and we observed no impact on our services during the monitoring period. The following services were not affected and remained fully operational throughout: Core, SMP, Connect Me, Analytics, Call Recording, Call2Teams, Softphone, BMP, VoipCube, CRM Connect, Teams Connect, Zone, Carrier Automate, and Mobile Apps. Next steps No action is required from customers. We will continue to follow security developments closely and apply updates as needed to keep our services secure. If you have any questions, please contact Dstny Support.