PHP critical vulnerability response

In this article:

On 20 October 2026, two critical security vulnerabilities in PHP, the programming language our platform runs on, were publicly disclosed. We take the security of your data and your business very seriously, so we acted on it immediately.

The PHP Foundation released security patches on 21 October 2026 at 4:00 pm CEST. Our engineering team upgraded all our systems to PHP version 8.5.12, which includes the fixes for these vulnerabilities. The migration was completed at 5:13 pm CEST.

Our systems are running on the updated version, and we continue to actively monitor the situation. Your Spreadly digital business cards, lead capture, and email signatures continue to work as usual, and you do not need to take any action.

If you have any questions or concerns, please contact our support team at any time. We are happy to help.

Thank you for your trust in Spreadly.

Warm regards,

Florian Theimer
CEO & Founder