Romualdo da Silva

Important PHP Security Update: What Cloud and On-Premise Bitrix24 Users Need to Know The vulnerabilities were found not in the Bitrix24 code, but in an external component — PHP. This is a server-side technology used by many websites and services, including Bitrix24. The PHP developers have reported two critical vulnerabilities. The fixes are scheduled for release today, October 21. ☁️ Cloud: No action is needed. Our team maintains the servers and will take the necessary steps to protect your data. Some features, especially file uploads, may be temporarily disabled while fixes are installed and security checks are completed. They’ll be restored once safe operation is verified. 🖥 On-premise: Contact your system administrator, servicing partner, or hosting provider. Ask them to check your PHP version, install the fixes as soon as they’re released, and verify that your account works properly afterward. PHP is updated at the server level, separately from Bitrix24 itself. Security of your data comes first.