Global PHP security issue

Monitoring

All services have been restored and we are monitoring the platform closely for any issues

Problem Identified

A critical security vulnerability affecting PHP, a widely used web technology, was announced by
cybersecurity authorities and the PHP development team. The vulnerability could potentially
allow attackers to execute malicious commands on affected systems if left unpatched.
As a precautionary measure, Reapit has temporarily taken a small number of services offline while
security updates are implemented and validated.

Which Reapit services are affected?
The following services have been temporarily taken offline:
• Reapit Sales
• Digital Leadplus (Digital Proposals, RP Proposals and CET)

All other Reapit services continue to operate normally unless otherwise advised.

Why were these services taken offline?
Protecting customer data and systems is our highest priority. While there is currently no evidence
that Reapit systems have been compromised, we have proactively taken these services offline to
reduce risk while security updates are applied and validated.
This approach aligns with guidance from cybersecurity authorities and the PHP security team.

Affects 2 Services: