Little Green Button Support Portal

Use of PHP: PHP is used in two places. Our Little Green Button infrastructure uses it for an internal messaging component, where it does not serve web traffic. Our public marketing website also uses it. The website is hosted separately and does not connect to the alerting system.

Impacted systems: None identified. The vulnerabilities affect PHP's handling of web requests, which our Little Green Button infrastructure does not use.

Remediation status: Although our Little Green Button infrastructure was not affected, we updated it to PHP 8.4.27, which fixes both vulnerabilities, as a precaution on 22 October 2026. The website was also patched on 22 October 2026. Patching required no downtime.

Temporary mitigations: None were needed. The PHP process on our Little Green Button infrastructure does not accept HTTP traffic.

Evidence of exploitation: We are not aware of any exploitation.

Impact to services delivered to you: None. No downtime was needed, and the Little Green Button client software is unaffected.