We have now successfully deployed a security patch without requiring any downtime of the Content Workflow platform.
Posted Oct 21, 2026 - 18:39 UTC
Identified
This morning, PHP announced two critical vulnerabilities in PHP2Shell RCE that allow an unauthenticated attacker to run code on a web server, along with the release of emergency patch updates that remediate and close the vulnerabilities. The Content Workflow platform uses PHP in several areas and our teams are in the process of applying the fixes to the platform to close the vulnerability.
Out of an abundance of caution, and in order to apply the patch and regression test the Content Workflow platform functionality, the platform will be offline for the upcoming period while we address the issue.