You may have seen news reports today about critical security vulnerabilities in PHP, the programming language that powers around 70% of the world’s websites. We want to reassure our clients straight away: there is nothing you need to do, and your iProperty and iDashsites website is secure.
What happened?
Two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, have been publicly disclosed. Details are in the Australian Cyber Security Centre’s alert.
What we’ve done
Our team has already rolled out PHP updates to all of our website hosting platforms. Your website has been updated and remains secure, and you don’t need to do anything.
Ongoing platform maintenance, including critical security updates like these, is part of the service we provide. It’s how we keep your website secure, so you can stay focused on your clients and listings.
Is iDashboard affected?
No. iDashboard does not use PHP and is unaffected by these vulnerabilities.
Reminder: protect yourself from scams
News like this is often followed by scam emails. Our team will never contact you to tell you that:
- your website is “currently exposed” to a PHP vulnerability
- your website is insecure
- your website needs a WordPress update
- you need to pay us to apply these fixes
Emails like these are scams for financial gain, and you should never reply to them.
We may email you from time to time to update your domain DNS settings if we are running website migrations. If you’re unsure about an email that appears to be from us, please contact our help team directly on 1800 432 742 or email help@iproperty.com.au.
