News reports was posted on june 7, 2024 about a new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially impacting a massive number of servers worldwide.. (https://www.bleepingcomputer.com/news/security/php-fixes-critical-rce-flaw-impacting-all-versions-for-windows/)

Upon becoming aware of the potential, Ulobby initiated an investigation to determine if the vulnerable versions where deployed on Ulobby servers. This investigation, was concluded on june 8th and found no usage of the vulnerable software, and no action required for Ulobby customers

The vulnerability is related to encoding conversion within the Windows operating system and as none of our systems run on windows they are not influenced and we are positive that the vulnerability does not have implications for our customer data.

As a security precaution we have deployed firewall rules to block attempts to use the vulnerability and/or scans of our network for exposure to the vulnerability. When triggered the rules are used to identify and block malicious actors (honeypot). So note that if you run scans against our systems, make sure to do so from another network than your users.

Customers do not need to take any action.