Status: Identified – Security Vulnerability Mitigation in Progress
Following the recently identified critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619), we have proactively placed Orro Cloud Phone systems into read-only mode as a precautionary security measure.
This action is being taken to minimise potential security risks while we prepare to deploy the vendor's security patch.
Service Impact:
Core telephony services, including inbound and outbound calling, are expected to remain operational. However, administrative functions and configuration changes will be temporarily restricted while the systems remain in read-only mode.
Normal functionality will be restored once the security patch has been successfully applied and validated.
We will continue to monitor the situation and provide further updates as they become available.
We apologise for any inconvenience caused and appreciate your understanding.