Recent reports about PHP security vulnerabilities have understandably raised questions about the security of business applications and document management systems.
We would like to reassure our Efalia ECM (FileDirector) customers that the software does not contain or use PHP.
Efalia GmbH, the manufacturer of Efalia ECM, has formally confirmed in its declaration dated 23 October 2026 that the software contains no PHP components and does not use PHP as a runtime environment. Consequently, PHP-specific security updates or upgrades are not required for Efalia ECM.
This means that the PHP-related security concerns currently in the news do not apply to Efalia ECM (FileDirector) itself.
As always, maintaining a secure environment remains important. Efalia’s declaration clarifies that any necessary updates and security patches for other software components, libraries or system components remain applicable.
For your reference, we have attached the official declaration from Efalia GmbH. Click Here
In summary: Efalia ECM (FileDirector) does not use PHP, and no PHP-specific updates are required for the product. Our focus remains on keeping our customers informed and helping them maintain secure and reliable document management environments.
