A critical vulnerability affecting PHP has recently been widely reported, attracting attention due to how many websites worldwide run on PHP. The disclosure has led administrators across the industry to apply urgent patches and mitigations to protect their systems.
RealVNC websites were protected throughout
We want to reassure customers that www.realvnc.com, vnc.com and remotable.com were proactively protected against this vulnerability. A mitigation was applied on the morning of Wednesday 21st October 2026, ahead of the full patch being rolled out, to reduce or eliminate any risk.
What we've confirmed
We've confirmed the following with our website hosting partners:
- All RealVNC sites are protected.
- The relevant PHP security updates have been rolled out across our website hosting platform.
- No evidence has been found of any compromise.
RealVNC Connect Portal and cloud services are unaffected
PHP is not used on any servers that host the RealVNC Connect Portal (manage.realvnc.com) or our cloud services, so these are unaffected by this vulnerability.
Next steps
No action is required from customers as a result of this issue. If you have any questions or concerns, please contact our Support team.
Comments
Article is closed for comments.