BmyGuest is not affected by the critical PHP vulnerability

Is BmyGuest affected?

No. BmyGuest does not use PHP. Both the BmyGuest platform and bmyguest.eu are built on Microsoft’s .NET platform.

This means that your data in BmyGuest is not at risk from these vulnerabilities, and that you do not need to do anything.

What has happened?

PHP is a widely used programming language for websites and web applications. On 21 October 2026 the PHP project issued a security advisory about two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). They are rated 9.2 out of 10 for severity (CVSS 4.0) and, in the worst case, let an attacker run their own code on the server without logging in.

The vulnerabilities are in PHP itself, not in a particular website or product. They therefore affect everyone who runs PHP on a web server, and the PHP project urges all users to update immediately to version 8.5.12, 8.4.27, 8.3.36 or 8.2.35.

If you use PHP yourselves

Many websites, such as those built with WordPress, run on PHP. If your organisation has systems that do, ask your supplier or IT department to confirm that PHP has been updated. The PHP project’s advisory has all the details.

If you have questions about security in BmyGuest, you are always welcome to contact us. Read more about how we protect your data in the article “BmyGuest, a GDPR-compliant solution”.