Autonoma - Notice history

On 21 October 2026 we installed a critical security update for PHP (PHP2Shell). After the update, we investigated whether this vulnerability had been used against our platform before the update. We reviewed six days of web server logs, application logs, security alerts and server files. We found no sign of a successful attack, no changed files and no sign that customer data was accessed. A summary can be found in the attached document.

Security patching has completed successfully.

The updated PHP package containing the fix is still being built. We’re closely monitoring its availability and will apply the update as soon as it becomes available in the repositories.

Security patching is now in progress.

Maintenance has completed successfully.

To benefit fully from the update redownload your VPN profiles from the plattform from now on.