{"id":62643,"date":"2026-10-23T12:18:34","date_gmt":"2026-10-23T10:18:34","guid":{"rendered":"https:\/\/gomonta.com\/?p=62643"},"modified":"2026-10-28T11:14:52","modified_gmt":"2026-10-28T10:14:52","slug":"php-vulnerability-4-questions-for-your-fulfilment-partner","status":"publish","type":"post","link":"https:\/\/gomonta.com\/en-gb\/blog\/php-vulnerability-4-questions-for-your-fulfilment-partner\/","title":{"rendered":"PHP Vulnerability: 4 Questions for Your Fulfilment Partner"},"content":{"rendered":"\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000001\" data-block-id=\"000001\"><p class=\"stk-block-text__text\">In this blog, we explain what happened, how we responded, and what questions you can ask your fulfilment partner.<\/p><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\"><strong>What Happened: The PHP Vulnerability of October 2026<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000002\" data-block-id=\"000002\"><p class=\"stk-block-text__text\">On 21 October, two critical security vulnerabilities were discovered in PHP. At that time, a so-called Proof of Concept was already available: a technical demonstration showing how the vulnerabilities could be exploited. PHP had not yet released any updates to patch the vulnerabilities. Those updates were announced around 4 pm The National Cyber Security Centre (NCSC) published a notice that same day stating that there were indications of actual exploitation.<\/p><\/div>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000003\" data-block-id=\"000003\"><p class=\"stk-block-text__text\">PHP is one of the most widely used programming languages on the web. Many online shops, platforms and logistics systems (about 70%) run on it. As a result, a problem in PHP can quickly affect thousands of organisations at once.<\/p><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\"><strong>Why Your Fulfilment Partner\u2019s IT Matters<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000004\" data-block-id=\"000004\"><p class=\"stk-block-text__text\">As an online shop, you outsource your logistics\u2014and with that, a large part of your IT. Your orders flow through integrations with your e-commerce platform, marketplaces and carriers. If one link in the chain fails, your customers will notice it immediately.<\/p><\/div>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000005\" data-block-id=\"000005\"><p class=\"stk-block-text__text\">If you are a customer of a fulfilment provider that was affected by the outage on 21 October 2026, you will recognise the following issues:<\/p><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Orders are not arriving at the warehouse, or are arriving late.<\/li>\n\n\n\n<li>Parcels miss the cut-off and are delivered a day later.<\/li>\n\n\n\n<li>Stock isn\u2019t updated in your online shop, so you end up selling products that are no longer in stock.<\/li>\n\n\n\n<li><a href=\"https:\/\/gomonta.com\/en-gb\/software\/montatracking\/\">Track &amp; trace<\/a> information is no longer accurate.<\/li>\n\n\n\n<li>Your customer service team receives questions that you can\u2019t answer yourself.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000006\" data-block-id=\"000006\"><p class=\"stk-block-text__text\">Especially during busy periods, such as the run-up to Black Friday and Christmas, even a few hours of downtime can cost a lot in lost revenue and customer trust.<\/p><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\"><strong>How Monta Manages Its IT<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000007\" data-block-id=\"000007\"><p class=\"stk-block-text__text\">At Monta, we develop and manage our systems ourselves. That gives us the flexibility to adapt quickly.<\/p><\/div>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000008\" data-block-id=\"000008\"><p class=\"stk-block-text__text\">A few principles we follow:<\/p><\/div>\n\n\n\n<div class=\"wp-block-group integration-features-wrap is-layout-flow wp-container-core-group-is-layout-d8aa5999 wp-block-group-is-layout-flow\">\n<p class=\"integration-feature has-text-color wp-block-paragraph\" style=\"color:#4A5568;font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.156), 16px);line-height:1.5\"><span style=\"color: #0f0e17;\" class=\"stk-highlight\"><strong>ISO 27001-certified.<\/strong> Our <a href=\"https:\/\/gomonta.com\/en-gb\/about-monta\/certifications\/iso-27001\/\">information security has been assessed in accordance with the international ISO 27001 standard<\/a>. This means that we systematically identify risks, respond quickly to threats and incidents, and evaluate our approach through internal and external audits.<\/span><\/p>\n\n\n\n<p class=\"integration-feature has-text-color wp-block-paragraph\" style=\"color:#4A5568;font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.156), 16px);line-height:1.5\"><span style=\"color: #0f0e17;\" class=\"stk-highlight\"><strong>Separate systems.<\/strong> Our external websites operate independently of the <a href=\"https:\/\/gomonta.com\/en-gb\/wms\/\">WMS<\/a>, <a href=\"https:\/\/gomonta.com\/nl\/software\/ordermanagement\/\">order processing<\/a> and our warehouses. This means that a problem on a website won\u2019t affect your orders.<\/span><\/p>\n\n\n\n<p class=\"integration-feature has-text-color wp-block-paragraph\" style=\"color:#4A5568;font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.156), 16px);line-height:1.5\"><span style=\"color: #0f0e17;\" class=\"stk-highlight\"><strong>When in doubt, we err on the side of caution.<\/strong> For example, we temporarily took our external websites offline until everything had been updated and verified.<\/span><\/p>\n\n\n\n<p class=\"integration-feature has-text-color wp-block-paragraph\" style=\"color:#4A5568;font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.156), 16px);line-height:1.5\"><span style=\"color: #0f0e17;\" class=\"stk-highlight\"><strong>Up-to-date software.<\/strong> We systematically keep our software stack up to date and do not use outdated versions. We run our systems exclusively on modern, highly secure platforms.<\/span><\/p>\n\n\n\n<p class=\"integration-feature has-text-color wp-block-paragraph\" style=\"color:#4A5568;font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.156), 16px);line-height:1.5\"><span style=\"color: #0f0e17;\" class=\"stk-highlight\"><strong>Fixed patch policy and continuous monitoring.<\/strong> We implement security updates quickly and in a controlled manner. We often detect anomalies before they have any impact.<\/span><\/p>\n\n\n\n<p class=\"integration-feature has-text-color wp-block-paragraph\" style=\"color:#4A5568;font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.156), 16px);line-height:1.5\"><span style=\"color: #0f0e17;\" class=\"stk-highlight\"><strong>Failover and backup.<\/strong> We use a full failover replica and have a comprehensive backup strategy that complies with current standards.<\/span><\/p>\n\n\n\n<style>\n.integration-feature {\n    padding-left: 28px !important;\n    position: relative !important;\n}\n.integration-feature::before {\n    content: '\\2713';\n    position: absolute;\n    left: 0;\n    top: 2px;\n    width: 18px;\n    height: 18px;\n    background-color: rgba(98, 187, 70, 0.12);\n    color: #62BB46;\n    border-radius: 50%;\n    font-size: 11px;\n    font-weight: 700;\n    line-height: 18px;\n    text-align: center;\n}\n<\/style>\n<\/div>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">When it became clear that the vulnerabilities were being actively exploited, we didn\u2019t wait around. As a precaution, we took our external websites offline. Our operational systems are intentionally separate from the websites, so the WMS and order processing continued as usual. At the same time, we kept a particularly close eye on the connections with our partners. We kept our customers informed via our software and by email.<\/p>\n<cite>\u2014 Rachel Egas, Head of IT at Monta<\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\"><strong>Your supply chain partners matter, too<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-000009\" data-block-id=\"000009\"><p class=\"stk-block-text__text\">Many partners in the supply chain do run on PHP: carriers, e-commerce platforms, plug-ins, and other software with integrations. If they experience a security breach or shut down their systems, you\u2019ll notice it, for example, in:<\/p><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Deliveries and tracking with carriers;<\/li>\n\n\n\n<li>your online shop\u2019s checkout process;<\/li>\n\n\n\n<li>your <a href=\"https:\/\/gomonta.com\/nl\/software\/retourlogistiek\/\">returns portal<\/a>;<\/li>\n\n\n\n<li>orders that come in via an integration.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-00000a\" data-block-id=\"00000a\"><p class=\"stk-block-text__text\">That\u2019s why, during this incident, we kept a particularly close eye on the integrations and the order flow. If we noticed anything at a partner that affected customer orders, we immediately notified them via <a href=\"https:\/\/gomonta.com\/nl\/software\/montaportal\/\">MontaPortal<\/a> (our software).<\/p><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\"><strong>4 Questions to Ask Your Fulfilment Partner<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-00000b\" data-block-id=\"00000b\"><p class=\"stk-block-text__text\">Are you unsure how well your logistics are protected? Ask these questions of your current or future fulfilment partner:<\/p><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>How can we tell that you value information security?<\/li>\n\n\n\n<li>What happens to my orders if your systems go down?<\/li>\n\n\n\n<li>How will I be notified of system outages?<\/li>\n\n\n\n<li>Who monitors the connections to my online shop and carriers outside of business hours?<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\"><strong>In conclusion<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-00000c\" data-block-id=\"00000c\"><p class=\"stk-block-text__text\">Incidents like this show just how dependent online shops are on the technology behind their logistics. At Monta, we see reliable IT as the foundation of good fulfilment &#8211; just as important as fast and accurate picking or custom packaging.<\/p><\/div>\n\n\n\n<div class=\"wp-block-stackable-text stk-block-text stk-block stk-00000d\" data-block-id=\"00000d\"><p class=\"stk-block-text__text\">Would you like to know how Monta processes your orders reliably and on time, even during the busiest periods?<\/p><\/div>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/gomonta.com\/en-gb\/contact\/\">Contact us<\/a><\/div>\n\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--1\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/gomonta.com\/en-gb\/request-quote\/\">Request a quote<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>On 21 October 2026, two critical security vulnerabilities in PHP were disclosed, causing many major websites to go offline as a precaution. At Monta, the WMS, order processing and warehouses continued to operate as usual: orders came in, were picked and shipped on time.<\/p>\n","protected":false},"author":29,"featured_media":62644,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[62],"tags":[],"class_list":["post-62643","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-en-gb"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"acf":[],"featured_image_urls_v2":{"full":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero.webp",2000,1334,false],"thumbnail":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero-150x150.webp",150,150,true],"medium":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero-300x200.webp",300,200,true],"medium_large":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero-768x512.webp",768,512,true],"large":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero-1024x683.webp",1024,683,true],"1536x1536":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero-1536x1025.webp",1536,1025,true],"2048x2048":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero.webp",2000,1334,false],"gform-image-choice-sm":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero.webp",300,200,false],"gform-image-choice-md":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero.webp",400,267,false],"gform-image-choice-lg":["https:\/\/gomonta.com\/wp-content\/uploads\/2026\/10\/php-kwetsbaarheid-hero.webp",600,400,false]},"post_excerpt_stackable_v2":"<p>On 21 October 2026, two critical security vulnerabilities in PHP were disclosed, causing many major websites to go offline as a precaution. At Monta, the WMS, order processing and warehouses continued to operate as usual: orders came in, were picked and shipped on time.<\/p>\n","category_list_v2":"<a href=\"https:\/\/gomonta.com\/en-gb\/blog\/category\/news-en-gb\/\" rel=\"category tag\">News<\/a>","author_info_v2":{"name":"Arina Wallaard","url":"https:\/\/gomonta.com\/en-gb\/author\/arina\/"},"comments_num_v2":"0 comments","_links":{"self":[{"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/posts\/62643","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/users\/29"}],"replies":[{"embeddable":true,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/comments?post=62643"}],"version-history":[{"count":1,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/posts\/62643\/revisions"}],"predecessor-version":[{"id":62645,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/posts\/62643\/revisions\/62645"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/media\/62644"}],"wp:attachment":[{"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/media?parent=62643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/categories?post=62643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gomonta.com\/en-gb\/wp-json\/wp\/v2\/tags?post=62643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}