Sonos pauses Chinese music services in app after PHP security flaws
Briefing by News4U · First published
Sonos China has suspended NetEase Cloud Music, QQ Music, Kugou and Kuwo inside its app while it applies security updates prompted by critical PHP remote-code-execution vulnerabilities.
ITHome reports that Sonos China announced on 23 October it is pausing NetEase Cloud Music, QQ Music, Kugou Music and Kuwo Music inside the Sonos App while it pushes security updates triggered by two critical PHP remote-code-execution flaws, CVE-2026-109618 and CVE-2026-109619. [1]
The PHP Foundation released emergency patches on 21 October covering versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35; affected earlier releases remain vulnerable. [1]
Sonos China said the services are expected to resume within days; users may need to re-authorize accounts, but playlists and favorites will be retained and no password changes or app reinstalls are required. [1]
Sources
- 受 PHP 漏洞影响，Sonos 音响官方 App 暂停国内网易云音乐、QQ 音乐、酷狗音乐、酷我音乐服务
ITHome · · Summary only