PHP security update: Kimai is on it. Kimai team has been following this situation and is ready to apply the fix ASAP. Kimai Cloud: We’re monitoring the release and will update all Kimai Cloud servers as soon as the official fix is available. No action on your side is needed. Self-hosted Kimai with Docker: We’ll release updated Docker images with the PHP fix as soon as it’s available and share it on GitHub. We’ll keep you updated! Learn more on on our blog: https://www.kimai.org/en/blog/2026/php-cve