Important Information: ASL's response to recent PHP Vulnerabilities
At ASL, the security of our systems and the protection of customer data remain a top priority.
Following the disclosure of the recently reported PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, we have been conducting a thorough review of our technology estate to determine whether any ASL-managed systems or customer-facing services are affected.
Our investigation is well underway, and the majority of our systems have already been reviewed and confirmed as not impacted by these vulnerabilities. The remaining checks are being completed as part of our standard security assurance process.
We continue to work closely with our software vendors, hosting providers, and technology partners to validate their exposure and remediation status where applicable. This collaborative approach helps ensure that any potential risks are identified and addressed promptly.
At this time, there is no evidence that ASL systems or customer data have been compromised as a result of these vulnerabilities. We will continue to monitor guidance from vendors and security organisations and take any necessary action should further information become available.
ASL remains committed to maintaining the security, integrity, and availability of the systems and services our customers rely upon.
Need assistance?
If you have any questions please don't hesitate to reach out.
Please contact dpo@asl-group.co.uk