Security Update: PHP Vulnerability Assessment and Mitigation Status

We have completed our review and remediation activities relating to the recently disclosed PHP vulnerabilities.

All identified systems have now been updated and are operating normally.

Our investigation identified no impact to customer data, service availability, or system functionality, and there is no evidence of exploitation within any Calxa systems.

We can confirm that the Billing System has already been updated to the latest supported PHP version by the Azure infrastructure team as part of their routine platform maintenance and security management.

We have completed an assessment of the recently disclosed PHP vulnerabilities and can confirm that the Calxa application, where customer data is stored and processed, is not affected, as it does not utilise PHP as part of its application stack.

The following systems have been reviewed:

• Calxa Application: Not impacted. The application does not use PHP.
• Billing System: Uses PHP but is hosted behind a secure VPN and is not publicly accessible from the Internet. Access is restricted to authorised users only.
• calxa.com Website: Uses PHP and is publicly accessible; however, additional firewall rules and security controls are in place to mitigate potential exploitation attempts.

All affected PHP-based systems are being updated to the latest supported PHP versions and associated security patches. We continue to monitor the situation and review our controls to ensure the ongoing security of our services.

At this time, there is no impact to customer access or service availability.

We will provide further updates as required.