+44 (0)203 479 7900
+1 612 416 2177
+61 (0)2 8880 9500
+64 (0)4 488 7481PHP and Node.js security advisories: impact on Alemba Service Manager
This page explains how the recent PHP and Node.js security advisories relate to Alemba Service Manager (ASM) and associated services.
PHP
ASM application code does not use PHP and is not affected by the vulnerabilities described in CERT-EU security advisory 2026-018. No ASM software update or configuration change is required in response to these PHP vulnerabilities.
Our corporate website, alemba.com, uses PHP, and the relevant security update has been applied.
Node.js
The ASM web application does not use Node.js. Some customer integrations provided through Alemba Integration Hub require an update in response to the Node.js security advisory published on 21 October 2026.
For the configurations reviewed, our technical assessment indicates that the reported remote-code-execution issue cannot be triggered directly by anonymous internet requests. An indirect risk remains through connected services.
We are preparing a controlled upgrade, which will be tested before rollout. We will contact customers whose integrations require an update directly with timings, any expected disruption and any action required.
Questions or support
If you have any questions about either advisory please contact the Alemba Service Desk through our support page.
Contact the Service Desk