Security and compliance
Cirros certifications, UK data residency, encryption, monitoring and resilience.
Read morePHP critical vulnerabilities: the Cirros position
On 21 October 2026 the NCSC published “Critical security issue affecting PHP”, describing two critical vulnerabilities fixed in a PHP security release the same day.
Cirros services are not affected
The Cirros platform does not use PHP. None of our cloud services, workstation software, administration portal, identity services or printer and MFD applications use it, and this website is a static site that does not use PHP either.
No PHP runtime is part of the hosting or deployment of any service we provide to customers, so these vulnerabilities do not affect them.
How we checked
We reviewed our source code repositories and our deployment, hosting and build configuration.
We will continue to monitor the NCSC and PHP Foundation guidance and will update customers if anything changes.
Contact us if you have any questions.
Related
Cyber Essentials Plus renewed
As a provider of cloud-based SaaS managed print solutions, this achievement underscores our commitment to maintaining the highest cybersecurity standards for our clients’ sensitive data and print environments.
Read moreWindows Protected Print: is your printing ready?
Microsoft is phasing out third-party printer drivers on Windows 11. Cirros supports Windows Protected Print as standard, so you can switch it on and keep printing.
Read more