Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 22, 2026 - 15:25 AEDT
Scheduled
Dear Partners,
Access4 is aware of a recently disclosed vulnerability affecting PHP (CVE-2026-109618 and CVE-2026-109619, also known as “PHP2Shell”). The PHP team released an official fix at 00:30 AEDT on Thursday, 22 October 2026.
Our teams assessed the vulnerability against the Access4 platform as soon as it was disclosed. We have found no evidence of exploitation.
Remediation details: We are upgrading PHP on SASBOSS to a version that includes the official fix. Testing is complete. Because the vulnerability is critical, we are deploying the fix immediately.
Impact: SASBOSS users may be logged out during the upgrade and will need to log back in once it’s complete. As an additional precaution, we are also temporarily disabling access to VoIPmon. No action is required from partners or their customers. Calling services, including 000, are not affected.