Critical PHP Vulnerability: OneQrew Takes Online Services Offline as a Precaution

Following the disclosure of critical security vulnerabilities in PHP, a web technology used worldwide, the OneQrew Group proactively took numerous websites and online services offline on October 21, 2026. With this decision, the company deliberately placed the protection of its customers, their data, and its own systems above the short-term availability of its services.

On October 21, 2026, critical security vulnerabilities were disclosed in PHP, a technology deployed worldwide for websites and web-based applications. The vulnerabilities affected the underlying technology and were not a security issue specific to the OneQrew Group or its software products.

Given the risk of potential exploitation of the vulnerabilities, OneQrew decided on the same day to take the affected servers and applications offline as a precautionary measure. At the time the decision was made, no security updates were yet available.

Security Before Availability

The measure was preventive and not a response to a confirmed cyberattack. In doing so, OneQrew knowingly accepted temporary disruptions for customers, internal processes, and its own business in order to minimize potential security risks at an early stage.

Once the necessary security updates became available, the IT teams, working closely with the providers involved, immediately began reviewing and implementing them. The systems that were taken offline will be brought back into operation gradually following successful security validation.

This decision underscores the OneQrew Group’s commitment to treating IT security not merely as a technical task, but as a matter of corporate responsibility. This includes acting early and decisively in the interest of customers, even when this temporarily entails disruptions.

For further information and up-to-date status reports on the availability of our online services, please visit our information page on security measures.