PHP and Node.js security advisories: impact on Alemba Service Manager

PHP

ASM application code does not use PHP and is not affected by the vulnerabilities described in CERT-EU security advisory 2026-018. No ASM software update or configuration change is required in response to these PHP vulnerabilities.

Our corporate website, alemba.com, uses PHP, and the relevant security update has been applied.

Node.js

The ASM web application does not use Node.js. Some customer integrations provided through Alemba Integration Hub require an update in response to the Node.js security advisory published on 21 October 2026.

For the configurations reviewed, our technical assessment indicates that the reported remote-code-execution issue cannot be triggered directly by anonymous internet requests. An indirect risk remains through connected services.

We are preparing a controlled upgrade, which will be tested before rollout. We will contact customers whose integrations require an update directly with timings, any expected disruption and any action required.

Questions or support

If you have any questions about either advisory please contact the Alemba Service Desk through our support page.

Contact the Service Desk