This documentation was authored in part by secure AI tools. Please review this content carefully before integrating it with other processes.

Action Recommended: On-premise Q360 customers should submit a service call request with Solutions360 to apply the PHP security update. Customers on Q360 SaaS are not required to take any action.

What is changing

The PHP security team released a security update on October 21, 2026 addressing two critical vulnerabilities in PHP. Full details, including affected and fixed versions, are available at www.php.net.

Who is affected

This notice applies to on-premise Q360 customers only. Customers on Q360 SaaS are not required to take any action.

Please note: this is not a vulnerability in the Q360 application. PHP is a third-party server component in your on-premise Q360 environment — typically maintained by your IT team, with Solutions360 available to assist.

What you need to do

Submit a service call request with Solutions360 to apply this PHP update:

• Contact support@solutions360.com to request a service call.
• Include a few preferred days and times outside business hours — a brief IIS service restart is required.

Reference

• https://www.php.net/archive/2026.php#2026-10-21-5 | Security advisory: Critical remote code execution vulnerabilities, update now | 21 Oct 2026