Critical Vulnerability Disclosure
This document will be updated over time with any important software vulnerability information
22 October 2026
The core TrilbyTV services are not impacted by the recently disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619).
We regularly run security audits on the tools and libraries used to run our service and apply necessary updates as they become available.
Customers should ensure they are running the latest versions of our TrilbyTV Player app, details of which can be found on https://updates.trilbytv.co.uk/changelog