Critical PHP security vulnerabilities: NORRIQ LFA is not affected
October 22, 2026 | Cybersecurity Update | NORRIQ Law Firm
Recent cybersecurity alerts have raised concerns about two critical vulnerabilities affecting PHP, a programming language widely used in websites and business applications. At NORRIQ, we understand that security and business continuity are essential for law firms, particularly when working with confidential client information and sensitive legal documents.
Following the security advisory issued by CERT-EU, our technical team proactively reviewed our LFA solution to determine whether these vulnerabilities could have any impact on our customers.
We can confirm that NORRIQ LFA is not affected by these vulnerabilities. No action is required from LFA customers.
What happened?
On 20 October 2026, CERT-EU published security advisory 2026-018, highlighting two critical vulnerabilities in PHP:
CVE-2026-109618
CVE-2026-109619
These vulnerabilities could allow attackers to remotely execute malicious code on affected servers without authentication.
Given the widespread use of PHP across websites and applications, cybersecurity authorities have urged organisations to assess their systems and apply the necessary security updates.
What does this mean for NORRIQ LFA?
In response to the advisory, NORRIQ's technical team conducted a review of the LFA solution and its underlying technology.
The assessment confirmed that LFA does not use PHP and is therefore not affected by the identified vulnerabilities.
Our technical verification included:
Application code: No PHP files are present in the LFA code repositories.
Cloud infrastructure: No PHP runtime is configured within the solution's Azure infrastructure templates.
Azure Functions: All Function Apps run on .NET 10 using the isolated worker model.
Connected technologies: The solution uses Microsoft Dataverse, TypeScript, Microsoft Dynamics 365 Business Central and Power BI, none of which rely on PHP within the reviewed LFA implementation.
Based on these findings, the vulnerabilities described in CERT-EU advisory 2026-018 do not apply to the LFA solution.
What action should customers take?
No action is required for NORRIQ LFA.
Customers can continue using LFA as usual. No LFA-specific security patches, configuration changes or additional measures are necessary in response to these two vulnerabilities. However, organisations using other applications or websites that rely on PHP should ensure that those systems are assessed and updated in line with the official security recommendations.
Our commitment to security
At NORRIQ, we recognise the importance of reliable and secure technology in the legal sector.
Law firms depend on digital solutions to manage their daily operations, streamline processes and handle sensitive information. That is why we take cybersecurity advisories seriously and proactively assess their potential impact on our solutions.
By staying informed about emerging security risks and reviewing our technology against relevant advisories, we aim to provide our customers with clear, timely information and confidence in the solutions they use.
Have questions about this security advisory or your NORRIQ LFA?
Please contact your NORRIQ representative. Our team is happy to provide further clarification.
Official reference: CERT-EU Security Advisory 2026-018 – Critical Vulnerabilities in PHP
