PHP vulnerability

Incident Report for Picqer

Resolved

An update regarding security vulnerabilities in PHP: A fix for these vulnerabilities is now available, and we have implemented it within Picqer. Picqer remained fully operational throughout the day, allowing you to continue your work without interruption.

As you may have noticed, it was temporarily impossible to generate shipping labels for certain carriers. Their services will resume once they have implemented the necessary fixes.

Please note the following, if applicable:
Connections to CCV, Magento, and WooCommerce were intermittently unavailable. If you continued working in Picqer, any shipments you created were not pushed to your webshop. Once the connection is restored, we will automatically sync today’s shipments to your webshop. Please reach out to us in case this did not happen automatically.

If you have any questions, please feel free to let us know.
Posted Oct 21, 2026 - 21:26 CEST

Monitoring

We are aware of recently reported security vulnerabilities in PHP, one of the technologies Picqer uses.

As a precaution, we have already taken additional measures to secure our environment. We are monitoring the situation: all functionality remains available as usual.

We will post an update on this page as soon as we have more information.

Integrations
Several integrations have temporarily suspended their services, which means you cannot use every service.

DeliveryMatch, DPD, MyParcel and QLS have taken their services offline. It is not possible to generate shipping labels.

CCV has also taken their services offline. It is not possible to push stock updates and shipments to CCV.
Posted Oct 21, 2026 - 13:15 CEST