The Central Depository Services (India) Limited (CDSL) on October 22, 2026, has advised all Depository Participants to review the CERT-In vulnerability note concerning critical vulnerabilities in PHP server environments arising from memory corruption and improper resource control. These vulnerabilities may be exploited remotely through specially crafted requests, potentially enabling arbitrary code execution and compromising affected systems.
Depository Participants are required to report any related active exploits, anomalies or security incidents to [email protected]. They must also identify whether any end-of-life (EOL) PHP versions are in use and outline remediation measures, including upgrading or isolating vulnerable versions, as applicable.
[Notification No. CDSL/IS/DP/POLCY/2026/742]
