Internal Major PHP Vulnerability

Incident Report for TOPdesk SaaS Status page

Update

PHP vulnerabilities

As reported earlier regarding the two critical vulnerabilities in PHP, none of the TOPdesk product uses PHP. These vulnerabilities therefore do not affect the TOPdesk application, and no action is required for your environment.

Some of our external websites do employ PHP however. Therefore, we've decided to temporarily take the following websites offline, until the fix is implemented:

- www.topdesk.com
- careers.topdesk.com
- marketplace.topdesk.com

Your my.topdesk access will remain unaffected.

If your organization uses PHP in other applications or custom integrations, please follow the PHP security guidance for those systems.
Posted Oct 21, 2026 - 15:34 CEST

Investigating

TOPdesk unaffected by PHP vulnerabilities

Following reports of two critical vulnerabilities in PHP, we want to reassure you that TOPdesk does not use PHP. These vulnerabilities therefore do not affect the TOPdesk application, and no action is required for TOPdesk.

If your organisation uses PHP in other applications or custom integrations, please follow the PHP security guidance for those systems.

To inform TOPdesk you are affected by this issue, please visit https://my.topdesk.com/tas/public/ssp/ . Please refer to incident TDR26 10 5632.
Posted Oct 21, 2026 - 15:31 CEST
This incident affects: Functionality malfunction.