PHP vulnerabilities: Latest information on the TOPdesk application, our websites and the community

Hi everyone,

Following reports of two critical vulnerabilities in PHP, we’d like to explain what this means for the TOPdesk application, our websites and the community.

The TOPdesk application is not affected

The TOPdesk application does not use PHP. The reported vulnerabilities therefore have no impact on the application, and you do not need to take any action regarding TOPdesk. You can find more information in KI 19519 in MyTOPdesk.

If your organisation uses PHP in other applications or custom integrations, please follow the PHP security guidance for those systems.

TOPdesk websites temporarily unavailable

Out of an abundance of caution, we’ve temporarily taken www.topdesk.com and related websites offline. This follows a publicly disclosed vulnerability in PHP affecting many websites worldwide and we chose to act preventively while the fix is applied.

We look forward to being back up shortly and will keep you posted.

Protective measures for the community

Our community runs on the Gainsight Customer Communities platform, whose codebase partly uses PHP. The community platform is therefore affected by the vulnerability, and Gainsight took protective measures before the security update was released.

As part of these measures, all file uploads have been temporarily disabled.

This means you currently cannot upload files to the TOPdesk Community.

Update October 26, 2026 - Uploads restored: 

Uploads in the TOPdesk Community were reactivated this morning and are working again. No action is needed.

Thank you for your understanding!