Information on the PHP security vulnerabilities
Following the Cyber Security Directorate’s PHP announcement of 21 October 2026: Doğansoft systems are not PHP-based and are not affected by the vulnerabilities described.
- Cyber security
- PHP
Announcement by the Cyber Security Directorate
The Turkish Cyber Security Directorate (Siber Güvenlik Başkanlığı) has issued an announcement to organisations on critical security vulnerabilities identified in the PHP software infrastructure:
Turkish Cyber Security Directorate, 21 October 2026
Critical security vulnerabilities have been identified in the PHP software infrastructure, which is widely used around the world.
To detect the risks these vulnerabilities may pose at an early stage and to limit their possible effects, the Directorate has launched nationwide security scans and sent urgent security notifications to the relevant institutions and organisations.
It is important that public institutions, critical infrastructure operators and private sector organisations review their systems and apply the necessary security updates without delay.
The full announcement is available on the Cyber Security Directorate website, and the technical measures in security notification TR-26-1372 (in Turkish).
Doğansoft systems are not PHP-based
The systems developed by Doğansoft are not PHP-based. The vulnerabilities described in the announcement therefore do not affect the Doğansoft systems used by your organisation.
We continuously monitor our systems and the software components they use, and we assess and apply security updates as soon as they are released. You can continue to use our systems with confidence.
What organisations should do
- No action is required from you for Doğansoft systems.
- If your organisation runs other applications built on PHP (such as a website, forms or a content management system), we recommend checking their versions and applying the technical measures published by the Directorate.
- For questions, you can reach us at info@dogansoft.tr.
This article has been prepared for general information purposes only and does not constitute legal, financial, technical or other professional advice. Legislative and technical information reflects the position as at the date of publication. Short extracts may be quoted provided that the source is cited and a link to the article is given; publication of the article in full or of a substantial part of it is subject to written permission. Terms of use