Security notice
Update: critical security vulnerabilities in PHP
Last updated on 21 October 2026
Earlier today we informed you about the critical security vulnerabilities in PHP and the investigation Centric has launched into them.
We have since received the additional information from PHP. Our IT and security teams have assessed it and determined for which systems and services additional security measures are required.
Centric has identified the necessary measures and is currently implementing them.
Where additional action is required for specific products or services, we will inform the customers concerned directly.
Specific situation: Locus WMS
Our investigation has shown that Locus WMS uses an outdated version of PHP that is vulnerable to the reported security issues.
Resolving this vulnerability will take more time. We are giving it the highest priority and are currently planning the changes required to remediate it. Customers using Locus WMS will be informed directly about the next steps and any action required for their installation.
What do we expect from customers?
At this time, no general action is required from customers. If specific measures are required from customers for other products or services, we will inform the customers concerned directly.
More information
Do you have questions about this situation? Please contact your regular contact person at Centric.