Your Platform Stays Available: How PlentyONE Security Protects Against the PHP Vulnerability

Yesterday, a serious vulnerability in PHP became public. PHP is the programming language behind many systems on the internet. Attackers could use it to start foreign programs on servers without logging in. The German Federal Office for Information Security (BSI) rates the risk as exceptionally high. Universities, ministries and companies across Europe took their systems offline as a precaution.

For you, an available platform is what counts. Without it, orders, shipping and revenue stand still. At PlentyONE, the platform kept running without you needing to act.

How we keep your platform secure

The flaw sits in PHP itself. Until the official update, no ready-made fix existed. Here's how we were able to identify the issue early and protect your infrastructure:

• Early warning: Our security partner alerted us immediately upon public notice so we acted without delay.
• Fast protection: Our AI agents prepared a safeguard that blocks the attack path to enforce protection with no restrictions to operations.
• Careful reviews: Our engineers reviewed every change before rollout. They built additional safeguards during the day to achieve stronger security for your data.
• Step-by-step rollout: We released every change in stages and monitored its impact to mitigate risks to your daily operations.
• Closed officially: We applied the PHP update as soon as it was released to close the vulnerability quickly.

Nothing changes for you

The safeguards and the PHP update are in place. Your platform runs as usual. You do not need to set up or update anything.