On 21 October 2026, two critical security vulnerabilities in PHP were disclosed (CVE-2026-109618 and CVE-2026-109619). Many online shops and websites worldwide run on PHP, including our online shop. The vulnerabilities were being exploited as early as the afternoon, before an update was released.
Our hosting provider therefore took the precautionary measure of disabling PHP, including on our site. Our online shop was unavailable on 21 October between approximately 3.30 pm and 6.00 pm. Orders, customer accounts and shop emails were not possible during this time.
The patched version of PHP was installed that very evening, thereby closing the vulnerability. We have thoroughly checked the systems and found no evidence of any unauthorised access to data. The online shop is now running as normal. You do not need to take any action.
If you have any questions, please contact us at info@elsner-elektronik.de or on +49 7033 3309450.