Silverstripe
- Aliases / services
- SilverStripe CMS / シルバーストライプ / Silverstripe
- Official website
- https://www.silverstripe.org/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Silverstripe CMS (self-managed)
- Response status
- PHP update required from operator
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Provider of a PHP CMS and related services.
The official notice identifies CVE-2026-109618/109619 in the PHP runtime; updating the CMS alone does not fix them.
Scope: Self-managed or externally hosted CMS only; Silverstripe-managed completion is listed separately.
What users should do
Apply a fixed PHP build or verified vendor backport and test each environment. For PHP8.1 or earlier, confirm a validated patched build with the provider.
Official service URL
Source URLs
- https://www.silverstripe.com/news/php-security-announcement-and-upcoming-patches-post/https://www.silverstripe.com/news/php-security-announcement-and-upcoming-patches-post/Response evidence
- Silverstripe CMS 6 server requirementshttps://docs.silverstripe.org/en/6/getting_started/server_requirements/Service and operation documentation
Silverstripe Cloud
- Response status
- Provider reports patching completed
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The23October16:00NZDT update reports full deployments applying PHP fixes to customer environments that had not yet updated.
Scope: This supersedes the22October deployment-request stage. The28October Dashboard maintenance normalizes capacity; it is not an unresolved patch or hosted-site outage.
What users should do
Check your environments and contact the Service Desk if needed. Where the Manifest uplift was deferred, complete email setup and plan the later uplift.
Source URLs
- https://www.silverstripe.com/news/php-security-announcement-and-upcoming-patches-post/https://www.silverstripe.com/news/php-security-announcement-and-upcoming-patches-post/Response evidence
Silverstripe Code Care / retainers and managed bespoke environments
- Response status
- Provider reports patching completed
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
At23October16:00NZDT, Silverstripe reports all active Code Care/retainer environments and bespoke customer environments managed by its teams patched.
Scope: Only explicitly managed environments are covered; this is not a claim about third-party hosts or all CMS installations.
What users should do
Follow any account-specific instructions from your team and verify application operation.
Source URLs
- https://www.silverstripe.com/news/php-security-announcement-and-upcoming-patches-post/https://www.silverstripe.com/news/php-security-announcement-and-upcoming-patches-post/Response evidence
Related official sources
- Silverstripe CMS 6 server requirementsOfficial information directory
Comments