FMIS software and application hosting do not use PHP and are unaffected by the October 2026 vulnerabilities. Read our update and links to NCSC guidance.