On 21 October 2026, two critical vulnerabilities in PHP received significant worldwide attention. ABS Laundry Business Solutions confirms that the ABSSolute ERP application stack is not affected, both in ABSSolute Cloud and in on premises installations.
PHP is a widely used web scripting language, running on approximately 70% of websites globally. The two vulnerabilities could potentially allow attackers to execute malicious code on affected servers, making them a major concern for organizations and service providers.
As a precaution, several online services, including government websites in the Netherlands and Belgium, have temporarily been taken offline while security measures and updates are implemented. Given the severity and widespread attention, ABS Laundry Business Solutions is proactively informing customers about the potential impact on its products and services.
The ABSSolute software architecture is primarily built on Java and does not rely on PHP. The vulnerabilities therefore do not affect the ABSSolute ERP application stack, whether deployed through ABSSolute Cloud hosting services or installed on premises. No impact is expected on the availability, functionality or performance of ABSSolute applications and services.
Information security remains a key priority at ABS Laundry Business Solutions. Infrastructure and services are protected by multiple layers of security, such as Extended Detection and Response (XDR) and Web Application Firewalls (WAF), which are actively maintained and kept up to date against emerging threats.
“No action is required from customers regarding their ABSSolute ERP environment. Our security team continues to monitor the situation and will take appropriate action whenever necessary.”
Questions About This Update?
The ABS Security Team is available to answer any questions about PHP2Shell and the security of ABSSolute.
Sign-up to our mailing list to receive newsletters, updates and promotions from ABS and Vitec Software Group member companies.
