We have applied the PHP security updates addressing the reported vulnerabilities. The affected websites—www.topdesk.com, careers.topdesk.com and marketplace.topdesk.com—are back online.
As previously communicated, the TOPdesk application was unaffected. No action is required for your TOPdesk environment.
This incident is now resolved. Thank you for your patience, and we apologise for the inconvenience."
Posted Oct 22, 2026 - 10:40 CEST
Update
PHP vulnerabilities
As reported earlier regarding the two critical vulnerabilities in PHP, none of the TOPdesk product uses PHP. These vulnerabilities therefore do not affect the TOPdesk application, and no action is required for your environment.
Some of our external websites do employ PHP however. Therefore, we've decided to temporarily take the following websites offline, until the fix is implemented:
If your organization uses PHP in other applications or custom integrations, please follow the PHP security guidance for those systems.
Posted Oct 21, 2026 - 15:34 CEST
Investigating
TOPdesk unaffected by PHP vulnerabilities
Following reports of two critical vulnerabilities in PHP, we want to reassure you that TOPdesk does not use PHP. These vulnerabilities therefore do not affect the TOPdesk application, and no action is required for TOPdesk.
If your organisation uses PHP in other applications or custom integrations, please follow the PHP security guidance for those systems.