On 21 October 2026 the PHP project released fixes for two critical vulnerabilities that could allow remote code execution on unpatched web servers.
eNudge is fully patched. All eNudge servers have been updated to the fixed PHP releases, and no action is needed from you. Your account, contacts and campaigns are not affected.