Urgent Planned Maintenance - UCXpress PHP Security Upgrade

Scheduled Maintenance Report for Access4 service

Completed

The scheduled maintenance has been completed.

Posted Oct 22, 2026 - 16:35 AEDT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Oct 22, 2026 - 16:05 AEDT

Scheduled

Dear Partners,

Access4 is aware of a recently disclosed vulnerability affecting PHP (CVE-2026-109618 and CVE-2026-109619, also known as “PHP2Shell”). The PHP team released an official fix at 00:30 AEDT on Thursday, 22 October 2026.

We have identified that UCXpress is affected by this vulnerability. Our teams assessed it as soon as it was disclosed, and we have found no evidence of exploitation.

Remediation details:
We are upgrading PHP on UCXpress to a version that includes the official fix. Because the vulnerability is critical, we will deploy the fix immediately.

Impact:

UCXpress users may experience a brief drop-out during the upgrade.
No action is required from partners or their customers at this time.

Expected duration of the upgrade: 5 minutes

Priority: Critical

For more information, see the CERT-EU security advisory: https://cert.europa.eu/publications/security-advisories/2026-018

We will keep monitoring closely, post updates on this page, and confirm once deployment is complete.

If you have any questions or concerns, please contact our Partner Care team on 1300 518 063 or partnercare@access4.com.

Posted Oct 22, 2026 - 16:03 AEDT

This scheduled maintenance affected: UCXpress (Voice Calling, Softphone App).