Any tech going down?

From the PHP CVE? PHP vulnerability 2026 CVE-2026-109619 patch: Why are government, school, hospital websites going offline, new PHP updates are live - The Economic Times

Details: PHP: News Archive - 2026

Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

More details: Today's PHP Security Release, and How We're Strengthening PHP Security — The PHP Foundation — Supporting, Advancing, and Developing the PHP Language

Anything built using PHP?
Are we all OK?

https://www.reuters.com/world/asia-pacific/eu-agency-warns-websites-may-need-be-taken-offline-php-prepares-patches-2026-10-21/

Here’s most of our tech summarized in table form with an accompanying link:

We should ask chris. He’s a frontend guy. Should we be worried about anything, @spdif48. ■■■■. I can’t tag him. Maybe I summon him another way…

Nightscout XDrip

Github repo shows it is 100% a Java build. No PHP, no problem?

image

Tidepool


nodeJS means no PHP?

OpenAPS

repo: openaps · GitHub

OpenOmni

repo: GitHub - openaps/openomni: Documentation and library for decoding omnipod communications. · GitHub

Probably no one has used this in years.

AndroidAPS

Contains some PHP: GitHub - openaps/AndroidAPSdocs: Documentation for AndroidAPS · GitHub
image
We have got a little PHP in here. Most recent update was 2 days ago so people are using this.

Abbott Libre

I don’t know what Libre is built with, but they DO want you to update that beast as of OCT 12. https://www.librecheck.com/content/dam/adc/librecheck/en-us/pdf/Patient_Letter_Field_Action_1002-2026_App_Security_Update_US-EN.pdf

Notes:

Updating your apps to the latest version addresses a security vulnerability affecting the FreeStyle
Libre 3 app and the Libre by Abbott app. As of 12-OCT-2026, Abbott is not aware of any
unauthorized access to a patient’s app in relation to this vulnerability, and there have been no
reports of adverse events.

In the event that this vulnerability were to be exploited, the apps could display incorrect sensor
glucose readings, and alarms may not function as intended or may provide incorrect alerts, which
may lead people with diabetes to make inappropriate treatment decisions, such as taking too much
or too little insulin or delaying necessary treatment.

This vulnerability impacts the FreeStyle Libre 3 app and the Libre by Abbott app only